LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   mod_proxy and email connections? (https://www.linuxquestions.org/questions/linux-security-4/mod_proxy-and-email-connections-395683/)

rioguia 12-22-2005 12:37 PM

mod_proxy and email connections?
 
Can someone point me in the right direction to answer some questions about my Fedora Core 4 server with Apache and Postfix. I have seen a big spike in my catch-all mailbox of rejected emails, apparently sent by some spanner pretending to be a mail server on my domain.

Additionally, I have seen attempts to connect to mod_proxy (which I have not enabled and understand is disabled by default in Apache 2.0). Specificially, my logs show:
Connection attempts using mod_proxy:
61.224.69.52 -> smtp.rol.ru:25: 1 Time(s)

and this notation:
Unrecognized warning:
p10040-ipbffx02hodogaya.kanagawa.ocn.ne.jp[60.39.233.40] sent non-SMTP command:
POST / HTTP/1.0 : 1 Time

The email that bounces has an attachment about discount software and its headers look like the following:
Quote:

Return-Path: <>
X-Original-To: JuliaSheets@fill_in_my_domain_here.com
Delivered-To: my_address@fill_in_my_domain_here
Received: from smtp1.abanet.org (smtp1.abanet.org [208.49.131.60])
by testy.fill_in_my_domain_here.com (Postfix) with ESMTP id 4A7411280EA
for <JuliaSheets@fill_in_my_domain_here.com>; Wed, 21 Dec 2005 16:40:12 -0500 (EST)
Received: from localhost (localhost)
by smtp1.abanet.org id jBLLemJb010459;
Wed, 21 Dec 2005 15:40:48 -0600 (CST)
Date: Wed, 21 Dec 2005 15:40:48 -0600 (CST)
From: Mail Delivery Subsystem <MAILER-DAEMON@smtp1.abanet.org>
Message-Id: <200512212140.jBLLemJb010459@smtp1.abanet.org>
To: <JuliaSheets@fill_in_my_domain_here.com>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="jBLLemJb010459.1135201248/smtp1.abanet.org"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
Status: RO
X-UID: 50261
Content-Length: 24108
X-Keywords:


All times are GMT -5. The time now is 10:17 AM.