From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Message-ID: <3ED6F466.6000003@help0.ru> Date: Fri, 30 May 2003 19:04:22 +1300 From: "Arcady V. Ivanov" Organization: Help Ltd. User-Agent: Mozilla/5.0 (X11; U; Linux i686; ru-RU; rv:1.3) Gecko/20030314 X-Accept-Language: ru-ru, ru MIME-Version: 1.0 To: sisyphus@altlinux.ru Subject: Re: [sisyphus] =?KOI8-R?Q?=FE=D4=CF_=D3_=DC=D4=C9=CD_=D3=C4?= =?KOI8-R?Q?=C5=CC=C1=D4=D8=3F?= References: <3ED6D86D.4090005@help0.ru> <20030530064620.GD16996@bebi.novosoft.ru> In-Reply-To: <20030530064620.GD16996@bebi.novosoft.ru> X-Enigmail-Version: 0.73.1.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=KOI8-R; format=flowed Content-Transfer-Encoding: 8bit Sender: sisyphus-admin@altlinux.ru Errors-To: sisyphus-admin@altlinux.ru X-BeenThere: sisyphus@altlinux.ru X-Mailman-Version: 2.0.9 Precedence: bulk Reply-To: sisyphus@altlinux.ru List-Unsubscribe: , List-Id: List-Post: List-Help: List-Subscribe: , List-Archive: Archived-At: List-Archive: Alexey Morozov пишет: >On Fri, May 30, 2003 at 04:05:01PM +1200, Arcady V. Ivanov wrote: > > >>Модем радостно моргает на отправку. Стал разбираться. >>Вот малюсенький кусочек логов любимой Апачи. Как я понимаю, >>эти спаммеры используют Мой httpd для отправки почты: >> >> >Вау. Отключать mod_proxy к едреной фене, а потом внимательно читать >документацию на mod_proxy и директивы allow/deny > > Часть желающих я прикрыл через iptables. С других сеток полезли, гады :o Вот это то, с чем работаю: Apache/1.3.23 (ALT Linux/alt6) PHP/4.1.2/ALT rus/PL30.11 Что то я не понимаю, вот дословно то, что в моём /etc/httpd/httpd.conf касается mod_proxy: #AddModule mod_proxy.c А вот свежий лог (минутной давности): 63.161.217.202 - - [30/May/2003:18:50:30 +1300] "CONNECT 209.153.3.15:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.202 - - [30/May/2003:18:50:55 +1300] "CONNECT 65.54.254.129:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.202 - - [30/May/2003:18:51:12 +1300] "CONNECT 64.66.0.8:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.202 - - [30/May/2003:18:51:43 +1300] "CONNECT 192.223.198.26:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.204 - - [30/May/2003:18:52:31 +1300] "CONNECT 65.54.252.230:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.204 - - [30/May/2003:18:52:35 +1300] "CONNECT 205.188.158.57:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.204 - - [30/May/2003:18:53:31 +1300] "CONNECT 216.251.192.11:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.204 - - [30/May/2003:18:53:57 +1300] "CONNECT 207.217.120.249:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.204 - - [30/May/2003:18:54:02 +1300] "CONNECT 65.54.252.230:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.202 - - [30/May/2003:18:58:34 +1300] "CONNECT 64.62.166.104:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.202 - - [30/May/2003:18:58:40 +1300] "CONNECT 12.9.6.40:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.202 - - [30/May/2003:18:58:42 +1300] "CONNECT 64.66.81.148:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.202 - - [30/May/2003:18:58:46 +1300] "CONNECT 130.244.199.222:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.202 - - [30/May/2003:18:58:56 +1300] "CONNECT 65.166.240.5:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.204 - - [30/May/2003:18:59:26 +1300] "CONNECT 212.74.114.7:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.204 - - [30/May/2003:19:00:10 +1300] "CONNECT 217.32.164.150:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.204 - - [30/May/2003:19:00:55 +1300] "CONNECT 64.136.28.83:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.204 - - [30/May/2003:19:00:59 +1300] "CONNECT 65.54.252.99:25 HTTP/1.0" 200 6365 "-" "-" 63.161.217.204 - - [30/May/2003:19:01:17 +1300] "CONNECT 166.82.29.9:25 HTTP/1.0" 200 6365 "-" "-" -- SY. Arcady. mailto:arc@help0.ru, WWW - http://www.help0.ru, Instant messenger : arc@jabber.ru