Mailing List Message #6623
From: Tod Fitch <>
Subject: What should I make of this?
Date: Wed, 2 Aug 2000 22:01:19 -0700
To: SIMS Discussions <>
Environment: SIMS v1.8b8. Relay for clients only, Verify return paths, Use RBL. RBL list is: "Please see" "Please see" "Please see"

Rather than directly fail the mail caught by the above, I have the following in my router:

;  Diagnostic route to test black list processing
<*@blacklisted> = blklist

and I have an account called blklist which I check periodically to see who attempted to send what.

Today (I was out of town and away from the Internet since Thursday) I found this in the blklist account (Sorry, I can't recall which RBL lookup trapped it. Too fast on the delete key...):

Received: from [] (HELO MailLite) by (Stalker SMTP Server 1.8b8) with SMTP id S.0000007613 for <>; Fri, 28 Jul 2000 22:12:55 -0700
From: <>
To: <>
Subject: Re: SM site URL
Date: Fri, 28 Jul 2000 20:33:20 -0800
MIME-Version: 1.0
Content-Type: text/plain
X-Mailer: MailLite 1.0

My browser won't load the URL right? is a name of my mail server. There is also a webserver on the ?_hrine, but it will default to a benign screen if accessed with the mail DNS name.

I have the feeling that these people are looking to use my server for their own purposes. What should I be looking out for?

Tod Fitch

Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster