Re: Unusual behavior by Mailwasher

"donut" <> wrote in message
news:Xns93D750563876donut@216.102.43.227...
> This morning when I fired up Mailwasher, Kerio kicked up this box:
>
> Firewall Alert!
>
> Pass This On > blocked out TCP; local host 1051->209.50.251.91;25
> Owner C\PROGRAM FILES\MAILWASHER
>
> After this, SYSTEM began trying to connect UDP to the same address on port
> 137.
>
> Could it be that Mailwasher has something in it the owner didn't tell us
> about?
>
> I will say this is the first time this has happened. I am using Sponge's
> Level 3 (paranoid) Kerio ruleset.

Probably trying to send a bounce.

If that's what you have it set to do.

I quit using mailwasher though, not integrated enough

--

-+ Shaolin +-
Discard what is useless, absorb what is not and
add what is uniquely your own.

.: http://www.security-forums.com :.

Lord Shaolin

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On torsdag 14. august 2003, 18:00 Lord Shaolin tried to express an opinion:

> Probably trying to send a bounce.

I've configured MailWasher to use my ISP's smtp server.

Maybe that'll stop these messages.

- --
Solbu - http://www.solbu.net
Remove 'ugyldig' for email
*****************************************
PGP key ID: 0xFA687324
*****************************************
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQE/O7hvT1rWTfpocyQRApeoAJ9nLPBICtMBnRUZ5u7CW0Kd2iWF+g Cg5L3x
OlcyHVvqKpgEsYrtYlzlWpA=
=+4Xw
-----END PGP SIGNATURE-----

Solbu

Solbu <> wrote in
news:QLO_a.20766$:

>
>> Probably trying to send a bounce.

Ahhhhh... and I just configured it to bounce. Before, all I did was delete.
Thanks.

donut

"Lord Shaolin" <abuse@127.0.0.1> wrote in message
news:...
> "donut" <> wrote in message
> news:Xns93D750563876donut@216.102.43.227...
> > This morning when I fired up Mailwasher, Kerio kicked up this box:
> >
> > Firewall Alert!
> >
> > Pass This On > blocked out TCP; local host 1051->209.50.251.91;25
> > Owner C\PROGRAM FILES\MAILWASHER
> >
> > After this, SYSTEM began trying to connect UDP to the same address on
port
> > 137.
> >
> > Could it be that Mailwasher has something in it the owner didn't tell us
> > about?
> >
> > I will say this is the first time this has happened. I am using Sponge's
> > Level 3 (paranoid) Kerio ruleset.
>
> Probably trying to send a bounce.
>
> If that's what you have it set to do.
>
> I quit using mailwasher though, not integrated enough
>
> --
>
> -+ Shaolin +-
> Discard what is useless, absorb what is not and
> add what is uniquely your own.
>
> .: http://www.security-forums.com :.


Lord Shaolin,
any recommendation on your current mail filter?
Thanks

>
>

Jacko

Thanks for the tips. I will check them out.
"Frode" <> wrote in message
news:3f3c0324$...
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Lord Shaolin wrote:
> > They are both x-platform and work as a bayesian spam proxy for whatever
> > mail client you use.
> >
> > Try spambayes first, I've heard technically it's best but I know some
> > people still prefer popfile.
>
> Just thought I'd add my preference. I use spampal (sorts spam by
consulting
> blacklists) and K9 (bayesian filter). The two combined have not let a
> single spam into my inbox for the months I've been using them. Both run
> invisibly processing the mail as OE fetches through them. Though, K9 does
> need some maintenance in reclassifying messages. That's true of any
> bayesian filter, of course.
>
> http://www.spampal.org
> http://keir.net/k9.html
>
>
> - --
> Frode
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP 8.0.2
>
> iQA/AwUBPzwCeeXlGBWTt1afEQKw8QCg5+gc8DpzFE0csWuyE06FrC wx2SwAnAvL
> w8hfLscshp0c5pAi1FyJPFKd
> =KFvm
> -----END PGP SIGNATURE-----
>
>

Thanks for the tips. I will check them out.

Jacko