Hi! This is the ezmlm program. I'm managing the
security-basics securityfocus.com mailing list.
I'm working for my owner, who can be reached
at security-basics-owner securityfocus.com.
Messages to you from the security-basics mailing list seem
to
have been bouncing. I've attached a copy of the first
bounce
message I received.
If this message bounces too, I will send you a probe. If the
probe bounces,
I will remove your address from the security-basics mailing
list,
without further notice.
I've kept a list of which messages from the security-basics
mailing list have
bounced from your address.
Copies of these messages may be in the archive.
To retrieve a set of messages 123-145 (a maximum of 100 per
request),
send an empty message to:
<security-basics-get.123_145 securityfocus.com>
To receive a subject and author list for the last 100 or so
messages,
send an empty message to:
<security-basics-index securityfocus.com>
Here are the message numbers:
46305
46306
46307
46308
46311
46312
46310
46309
46314
46304
46315
46316
46317
46318
46319
46320
46321
46322
46323
46324
46326
46325
46327
46328
46329
46330
46334
46333
46331
46335
46332
46336
46337
46338
46339
46340
46341
46342
46343
46344
46345
46346
46347
46355
46348
46349
46350
46351
46352
46354
46353
46356
46357
46358
46359
46360
46361
46362
46363
46366
46368
46365
46367
46364
46369
46370
46372
46374
46371
46373
46375
46378
46377
46380
46381
46376
46379
46382
46384
46383
46385
46386
46388
46387
46389
46390
46394
46393
46391
46392
--- Enclosed is a copy of the bounce message I received.
Return-Path: <>
Received: (qmail 8520 invoked from network); 26 Oct 2007
17:14:55 -0000
Received: from mail.securityfocus.com (205.206.231.9)
by lists.securityfocus.com with SMTP; 26 Oct 2007 17:14:55
-0000
Received: (qmail 28387 invoked by alias); 26 Oct 2007
16:28:51 -0000
Received: (qmail 28383 invoked from network); 26 Oct 2007
16:28:51 -0000
Received: from mx1.securityfocus.com (205.206.231.35)
by mail.securityfocus.com with SMTP; 26 Oct 2007 16:28:51
-0000
Received: from starfire.yahoo.com (starfire.yahoo.com
[66.98.192.98])
by mx1.securityfocus.com (8.13.1/8.13.1) with ESMTP id
l9Q9lh26010120
for <security-basics-return-46305-bond=yahoo.com securityfocus.com>; Fri, 26 Oct 2007 03:47:43
-0600
Received: from starfire.yahoo.com ([66.98.192.98]) by
starfire.yahoo.com
via smtpd (for mx1.securityfocus.com
[205.206.231.35]) with ESMTP; Fri, 26 Oct 2007 09:28:33
-0700
Received: by starfire.yahoo.com (Postfix)
id 2D96F400CF1; Fri, 26 Oct 2007 11:29:23 -0500 (CDT)
Date: Fri, 26 Oct 2007 11:29:23 -0500 (CDT)
From: MAILER-DAEMON yahoo.com (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: security-basics-return-46305-bond=yahoo.com securityfocus.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report;
report-type=delivery-status;
boundary="F17D24002E6.1193416163/starfire.yahoo.com&qu
ot;
Content-Transfer-Encoding: 8bit
Message-Id: <20071026162923.2D96F400CF1 starfire.yahoo.com>
This is a MIME-encapsulated message.
--F17D24002E6.1193416163/starfire.yahoo.com
Content-Description: Notification
Content-Type: text/plain; charset=us-ascii
This is the mail system at host starfire.yahoo.com.
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached
below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
The mail system
<bond yahoo.com>: cannot update mailbox /var/mail/bond
for user bond. error
writing message: File too large
--F17D24002E6.1193416163/starfire.yahoo.com
Content-Description: Delivery report
Content-Type: message/delivery-status
Reporting-MTA: dns; starfire.yahoo.com
X-Postfix-Queue-ID: F17D24002E6
X-Postfix-Sender: rfc822;
security-basics-return-46305-bond=yahoo.com securityfocus.com
Arrival-Date: Fri, 26 Oct 2007 11:29:22 -0500 (CDT)
Final-Recipient: rfc822; bond yahoo.com
Original-Recipient: rfc822;bond yahoo.com
Action: failed
Status: 5.2.2
Diagnostic-Code: x-unix; input/output error
--F17D24002E6.1193416163/starfire.yahoo.com
Content-Description: Undelivered Message
Content-Type: message/rfc822
Content-Transfer-Encoding: 8bit
X-Virus-Scanned: amavisd-new at yahoo.com
Received: from starfire.yahoo.com ([127.0.0.1])
by localhost (starfire.yahoo.com [127.0.0.1]) (amavisd-new,
port 10024)
with ESMTP id 4oBOMmA2Jj4p for <bond yahoo.com>;
Fri, 26 Oct 2007 11:29:16 -0500 (CDT)
Received: from outgoing.securityfocus.com
(outgoing.securityfocus.com [205.206.231.26])
by starfire.yahoo.com (Postfix) with ESMTP id 9A039400CF1
for <bond yahoo.com>; Fri, 26 Oct 2007 11:29:16
-0500 (CDT)
Received: from outgoing.securityfocus.com by
outgoing.securityfocus.com
via smtpd (for starfire.yahoo.com [66.98.192.98])
with ESMTP; Fri, 26 Oct 2007 09:25:36 -0700
Received: from lists.securityfocus.com
(lists.securityfocus.com [205.206.231.19])
by outgoing2.securityfocus.com (Postfix) with QMQP
id EDB611437E2; Fri, 26 Oct 2007 09:33:15 -0600 (MDT)
Mailing-List: contact security-basics-help securityfocus.com; run by ezmlm
Precedence: bulk
List-Id: <security-basics.list-id.securityfocus.com>
List-Post: <mailto:security-basics securityfocus.com>
List-Help: <mailto:security-basics-help securityfocus.com>
List-Unsubscribe: <mailto:security-basics-unsubscribe securityfocus.com>
List-Subscribe: <mailto:security-basics-subscribe securityfocus.com>
Resent-Sender: listbounce securityfocus.com
Sender: listbounce securityfocus.com
Errors-To: listbounce securityfocus.com
Delivered-To: mailing list security-basics securityfocus.com
Delivered-To: moderator for security-basics securityfocus.com
Received: (qmail 26221 invoked from network); 26 Oct 2007
02:24:17 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=beta;
h=domainkey-signature:received:received:message-id:date:from
:to:subject:mime-version:content-type:content-transfer-encod
ing:content-disposition;
bh=VZAkFQomNg+WD8RoLHnyUdOAg2REKcgrlpHzZ/QRadA=;
b=tCIs+KDy6gPzUhni83Se9HqSPXX6vBn63fv5Tl9KookTpYrToZUjLyWHoH
UD/AGKfOuKGbtrrF4sBeEC+AKrDqzOw26AZGhDKpp1K57qgH+OqsUOQFqyz2
CY9tzniZD6dXb2FU7nKWq7ixfLalPY8f0R2MAOixea9qgd5vVSgwc=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=beta;
h=received:message-id:date:from:to:subject:mime-version:cont
ent-type:content-transfer-encoding:content-disposition;
b=IxtfRu/heODky4GO/LCZ1cAdXgv+EVeUbZu+Rkby21WzLy/8/ZKbryuv88
gMkvfhohOQ4QA2XC7iep0C295tUxpQJClFvFol9NtbaluzWndC58GpUL7uyL
BWdzU3clhL9pVLu+/YWQtV8Vd0PqYNNgDoPCKBk3j6wjgCZg1BBJE=
Message-ID:
<8d954c40710251841oa6987fk708af1c8e970e6d6 mail.gmail.com>
Date: Thu, 25 Oct 2007 20:41:40 -0500
From: "Emanuel Marufo" <marufos gmail.com>
To: security-basics securityfocus.com
Subject: Help to defend from DOS web attacks
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Resent-Message-Id: <20071026153315.EDB611437E2 outgoing2.securityfocus.com>
Resent-Date: Fri, 26 Oct 2007 09:33:15 -0600 (MDT)
Resent-From: security-basics-return-46305 securityfocus.com
Hello,
Recently somebody attack my web server, and i thinking
defend from that.
I readed the next article:
http://www.quadrunne
r.com/index.php?option=com_content&task=view&id=151&
amp;Itemid=2
but i want to know if can config a snort/portsentry to block
attackers ip's.
--F17D24002E6.1193416163/starfire.yahoo.com--
|