spam problem using http

[danvant]

Hi Guys,

Not sure if this is the right forum, but i have this really annouying problem that i have a proxy server that when i check the logs is some how generating spam from an outside IP address. when i stop the http service of the proxy server the spam stops, below is a couple of line from the log files.

203.98.164.138 - - [29/Jan/2005:00:22:55 -0000] "CONNECT 168.144.1.79:25 HTTP/1.0" 200 425 - -
212.25.72.224 - - [29/Jan/2005:00:22:57 -0000] "CONNECT 213.133.104.11:25 HTTP/1.0" 200 345 - -

i cant find how this is happening, we have a firewall all the latest av/anti spyware and ms updates and still it keeps happeing as soon as i start the http service.

Any ideas much appreciated.

Dan

 

[ChrisAC]

You have an open proxy server that is being used to relay spam. This is a huge problem on the internet at the moment and seems to be the spamers method of choice as more mail servers are being secured and are not now open relays.

You need to secure your proxy configuration so that it will not accept external proxy requests. The Proxy server forum might be the best bet for this.

Chris.

**********************
Chris A.C, CCNA, CCSA
**********************