[Dshield] DSHIELD: Test to see if I get this post

Johannes B. Ullrich jullrich at sans.org
Tue Feb 21 19:05:29 GMT 2006


-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160


Already did...

Here are some log excerpts from the list mail server showing that the
mail leaves the list:


Feb 21 17:45:41 maverick12a sendmail[8920]: k1LHjfYg008920: from=<>,
size=2890, class=0, nrcpts=1,
msgid=<10602211251.AA20716886 at mail.denstarfarm.us>, proto=ESMTP,
daemon=MTA, relay=iceman12-ext.giac.net [65.173.218.113]
Feb 21 18:51:54 maverick12a sendmail[1142]: k1LIpsJH001142: from=<>,
size=2889, class=0, nrcpts=1,
msgid=<10602211357.AA20717492 at mail.denstarfarm.us>, proto=ESMTP,
daemon=MTA, relay=iceman12-ext.giac.net [65.173.218.113]


And from our external mail server showing that the mail is handed off to
his mail server.


2006-02-21 15:46:58.471573500 delivery 8165149: success:
62.65.110.90_accepted_message./Remote_host_said:_250_2.6.0__<768660443.20060221074037 at denstarfarm.us>_Queued_mail_for_delivery/
2006-02-21 15:47:15.575485500 delivery 8165206: success:
82.67.204.184_accepted_message./Remote_host_said:_250_Ok,_message_saved_<Message-ID:_<768660443.20060221074037 at denstarfarm.us>>/
2006-02-21 15:49:58.676271500 starting delivery 8168086: msg 8757556 to
remote weaver at denstarfarm.us
2006-02-21 15:50:42.078207500 delivery 8168510: success:
65.54.244.72_accepted_message./Remote_host_said:_250__<768660443.20060221074037 at denstarfarm.us>_Queued_mail_for_delivery/
2006-02-21 17:39:46.260573500 starting delivery 8188903: msg 8767949 to
remote weaver at denstarfarm.us
2006-02-21 17:43:32.959913500 starting delivery 8190605: msg 8768055 to
remote weaver at denstarfarm.us
2006-02-21 17:45:37.826159500 starting delivery 8192104: msg 8768134 to
remote weaver at denstarfarm.us
2006-02-21 18:51:45.763447500 starting delivery 8199115: msg 7937751 to
remote weaver at denstarfarm.us


Our outbound mail server is
iceman12-ext.giac.net [65.173.218.113]

I also did a manual 'telnet' test and it worked fine.




Jim McCullough wrote:
> Can someone with access to the lists check on Robert.  He hasnt seen
> any email from the General List in about 2 weeks.  Which is definately
> odd.
> 
> On 2/21/06, Robert D. <weaver at denstarfarm.us> wrote:
>> I am still not getting a single email from the list and am testing to
>> see if both, I get ACK and I see my own posting
>>
>> sorry for the bother.
>>
>> --
>> Regards,
>> Robert D.
>>
>>
>>
>> _________________________________________
>> Learn about Intrusion Detection in Depth from the comfort of your own couch:
>> https://www.sans.org/athome/details.php?id=1341&d=1
>>
>> _______________________________________________
>> send all posts to list at lists.dshield.org
>> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
>>
> 
> 
> --
> Jim McCullough
> MS WindowsXP - the lazy man's way to frustration, anger, and total
> psychological breakdown.
> 
> _________________________________________
> Learn about Intrusion Detection in Depth from the comfort of your own couch:
> https://www.sans.org/athome/details.php?id=1341&d=1
> 
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
> 


- --
- ---------
Johannes Ullrich                        jullrich at sans.org
Chief Research Officer                     (617) 639 5000
http://isc.sans.org
PGP Key: https://secure.dshield.org/PGPKEYS

"We use [isc.sans.org] every day to keep on top of
 security at our bank" Matt, Network Administrator.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD+2R5PNuXYcm/v/0RA5+hAJ4rBDQfoXD3axAtN6T2HNY4+eVsrQCbBvIy
hv4ciNDY8ZtSePz4AkC/xvg=
=GWvP
-----END PGP SIGNATURE-----


More information about the list mailing list