RE: Sendmail DOS ?

From: Hugo van der Kooij (hvdkooij@vanderkooij.org)
Date: 03/27/02


Date: Wed, 27 Mar 2002 22:43:27 +0100 (CET)
From: Hugo van der Kooij <hvdkooij@vanderkooij.org>
To: Incidents Mailing List <incidents@securityfocus.com>

On Wed, 27 Mar 2002, Steve Halligan wrote:

> This is from the NetSaint (a host monitoring tool) mailing list today:
>
> "Has anyone found a good way to eleminate the "NOQUEUE" messages which
> check_smtp produces in sendmail's logs?
>
> I took a look at the options for check_smtp and there was nothing there
> which would allow me to send something to the machine to make it into a
> non-null connect.
>
> Ideas?"

The most common cause of these logging rules in my case is VA including
sourceforge. Their servers do a probe to verify the sender does exist and
that the given server also will take mail for the postmaster of that
account.

If they can not verify the sender they claim their mailserver will no
accept the message.

It could be that this behaviour is spreading.

Hugo.

-- 
All email send to me is bound to the rules described on my homepage.
    hvdkooij@vanderkooij.org		http://hvdkooij.xs4all.nl/
	    Don't meddle in the affairs of sysadmins,
	    for they are subtle and quick to anger.

---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com



Relevant Pages

  • Re: A rant about HPs website.
    ... >>No effort was made to verify the identity of the sender. ... Stupid, stupid, stupid. ... >Explorer is the base standard at which we are aiming. ...
    (comp.os.vms)
  • Re: Email with Challenge Response System
    ... senders ISP and verify the sender. ... will be threatened with DNSB Listing for abuse. ... block his servers, I definitely will. ... You speak as an end user, sending email through your provider's servers. ...
    (microsoft.public.outlook.general)
  • Re: Duke Lacrosse Update:
    ... It isn't that hard to verify. ... I'd look for evidence other email was sent from the same PC that were apparently from the sender to other recipients. ... I'd check the mail server logs, and depending on what is being logged, ascertain when it was received by the mail server, where it went, at what time, from what IP address, and anything else I could glean from the logs. ...
    (alt.true-crime)
  • Re: Low end POWER4 servers
    ... The instructor of the AIX LPAR course told us an easy rule to identify ... "All servers with a black cover and the F50" ... in error) please notify the sender immediately and destroy this e-mail. ... the views of Linde Material Handling. ...
    (AIX-L)
  • Re: SMS Heirachy
    ... I have also tried rebooting both servers after adding the compter accounts ... > try and setup a standard address when i select the drop down box i dont ... > account is a member of the sms_sitetosite group on SiteB? ... >> A. The address will use the sender, but having a sender is not enough. ...
    (microsoft.public.sms.setup)