[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [vps-mail] Question about Sendmail/Spammers



Thanks, Lang - I also found out that I can simply use
this command line:

 ssh -l username remotehost.tld

it wasn't a big problem since there really is no
particular need for me to connect that way  - I just
didn't know how to do it because I had never tried
before. Bennett's instructions on how to telnet in for
a mail session reminded me that telnet is a wide open
door into my server.

So I did go ahead and disable telnet access to all my
servers. 

For anyone who doesn't know (I didn't until I looked
it up) - telnet can be cut off in the hosts.allow file
with this line:
 telnet : ALL : deny

The Chinese spammers are still at it, but now the line
I see in my message file is this:

 ruleset=check_rcpt, arg1=<realuser@xxxxxxxxxxxx>,
relay=[218.56.200.251], reject=550 5.7.1
<realuser@xxxxxxxxxxxx>... Relaying denied. Proper
authentication required.

So that tells me that Bennett was right - they were
trying to telnet in -- since simply sending email
using an IP number would not require authentication.
Though they must be using a different script or
protocol than the steps that Bennett out, because if I
simply try to telnet myself from another VPS, I get a
"
Connection closed by foreign host" message, but
nothing shows up in the message log of the VPS that is
being hit by the Chinese spammers. 

-Abigail







--- Lang Zerner <lang@xxxxxxxxxxxx> wrote:
> Abigail Marshall wrote:
> 
> >I haven't figured out how to use SSH for a
> connection from a session on
> >one VPS to another. (I can connect, but I can't
> provide the other server with a correct user name)
> >
> To connect to a specific user account using ssh from
> the command line, 
> specify the username before the host name as in an
> email address:
> 
> ssh user@xxxxxxxxxxx
> 
> You can do the same with scp to copy a file to or
> from a remote host:
> 
> scp localfile user@xxxxxxxxxxx:remotefile
> 
> Be seeing you...
> --Lang
> 
> 
> 
======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).


Main Index | Thread Index
Match: Format: Sort by:
Search: