rosen.stanford.edu blackholed on SMTP servers (fwd)

[Bill Murray]

Mr. computer at snf,

Unfortunately, I don't have time to deal with this at the moment.  Maybe
being "blackholed" at Stanford is a good thing.

Bill

---------- Forwarded message ----------
Date: Sun, 3 Nov 2002 14:20:55 -0800 (PST)
From: Jason Conroy <jconroy at cisnet.stanford.edu>
To: John Shott <shott at snf.stanford.edu>, Bill Murray <bmurray at snf.stanford.edu>,
     Mike Bell <mbell at snf.stanford.edu>
Subject: rosen.stanford.edu blackholed on SMTP servers (fwd)

---------- Forwarded message ----------
Date: Sun, 03 Nov 2002 10:22:04 -0800
From: Russ Allbery <eagle at windlord.stanford.edu>
To: "jconroy at teargarden.Stanford.EDU" <jconroy at teargarden.Stanford.EDU>,
     "security-nr at stanford.edu" <security-nr at stanford.edu>
Cc: "action-mail at stanford.edu" <action-mail at stanford.edu>
Subject: rosen.stanford.edu blackholed on SMTP servers

I've blackholed rosen.stanford.edu on the SMTP servers because it appears
to be an open relay.  Example double-bounce message attached.

         name: rosen
            alias: labadmin, rosencrantz
         type: Node (Host)
          cpu: Sun Ultra 2                                                     
       op-sys: Solaris (1)
   department: Electrical Engineering                                          
     location: Ctr for Integrated Systems (CIS) (04-050)                       
   interfaces: 
     1) ip-addr: 171.64.101.12      
         user: William McGaffee Murray (ds493h284)
administrator: Jason F Conroy (ds569b046)
        group: Electrical Engr
   updated-by: Jason F Conroy (ds569b046)
 date-updated: Nov 08 13:40 PST 2000

-- 
Russ Allbery <eagle at windlord.stanford.edu>
Technical Lead, ITSS Infrastructure Services, Stanford University


-------------- next part --------------
An embedded message was scrubbed...
From: unknown sender
Subject: no subject
Date: no date
Size: 12901
URL: <http://snf.stanford.edu/pipermail/computer/attachments/20021103/16e34054/attachment.mht>