RE: fix.your.open.relay.or.die.net

["Walden H. Leverich" <WaldenL@xxxxxxxxxxxxxxx>]

And people look at me funny when I say that I would never connect my
production AS/400 to the net!

How was the response time on the AS/400 during this attack? If CPU was ++++
I'd guess response time wasn't great. I would call this a successful DoS
attack on the AS/400.

-Walden

------------
Walden H Leverich III
President
Tech Software
(516)627-3800 x11
WaldenL@TechSoftInc.com
http://www.TechSoftInc.com



-----Original Message-----
From: Nathan M. Andelin [mailto:nandelin@relational-data.com]
Sent: Tuesday, November 20, 2001 12:23 PM
To: MIDRANGE-L@midrange.com
Subject: fix.your.open.relay.or.die.net


This is a multi-part message in MIME format.
--
My OS/400 SMTP server has been REALLY busy this morning.  It's a little
disconcerting to have somebody abusing my server, for reasons unknown to me.
SMTP jobs are driving CPU usage to ++++ %.

One clue is the Remote Host Name "fix.your.open.relay.or.die.net" on TCP/IP
port 209.151.233.24.  Anybody know who those folks are?  And, how to get
them to stop?

Thanks,

Nathan M. Andelin
www.relational-data.com


--
[ Nathan M. Andelin.vcf of type text/x-vcard deleted ]
--

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.