RE: AS/400 sending email

["Carl Galgano" <cgalgano2@xxxxxxxxxxxxxxxxx>]

Leif:
Is port 25 open to the internet to the AS/400?  If so, then it is not very
hard to do.  If you send me the IP address or host name via private email,
I'd be happy to test this for you.
cjg

Carl J. Galgano
EDI Consulting Services, Inc.
550 Kennesaw Avenue, Suite 800
Marietta, GA  30060
(770) 422-2995 - voice
(419) 730-8212 - fax
mailto:cgalgano@xxxxxxxxxxxxxxxxx
http://www.ediconsulting.com
AS400 EDI, Networking, E-Commerce and Communications Consulting and
Implementation 
http://www.icecreamovernight.com
Premium Ice Cream Brands shipped Overnight

Visit our website to subscribe to our FREE AS/400 Timesharing Service

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Leif Svalgaard
Sent: Wednesday, August 06, 2003 10:24 AM
To: Midrange List Tech
Subject: AS/400 sending email


Hi Folks,
Curious thing happened last night.
My AS/400 (having an IP address for remote VPN access) sent out 1800 emails
at 1:30 am. This information comes to me from the "commutations guy" (not
me) that handles the network. 
1) nobody that I know of sent the emails
2) can one see a log or some such to investigate
3) the comm guy said "someone hacked in and used the AS/400
to send email". My reply: this is supposed to be hard to do.
Am I really correct, faced with the above evidence?

Thanks


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.