From mboxrd@z Thu Jan 1 00:00:00 1970 From: "azeem ahmad" Subject: Re: smtp Date: Fri, 14 May 2004 20:11:56 +0000 Sender: netfilter-admin@lists.netfilter.org Message-ID: Mime-Version: 1.0 Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; format=flowed; charset="us-ascii" Content-Transfer-Encoding: 7bit To: netfilter@lists.netfilter.org thanks a lot for solving this problem but here just tell me one thing more that how u said that i m safe. is there tcpdump output telling something. if yes then how u judge it. Regards Azeem >From: Gavin Hamill >To: netfilter@lists.netfilter.org >Subject: Re: smtp >Date: Fri, 14 May 2004 20:47:23 +0100 > >On Friday 14 May 2004 19:54, azeem ahmad wrote: > > hi > > here is the out put even after blocking all smtp > > >--------------------------------------------------------------------------- > >------------------------------------------------------ > >21:17:31.259275 > > 192.168.0.101.4730 > 207.24.89.66.smtp: S > > 556950735:556950735(0) win 64240 (DF) > >Notice how all of these are your infected PC trying to talk to the outside >world, and that there are no packets from the outside world to the infected >PC? This will be due to your iptables commands blocking this from >happening.. >and given that the snapshot took place over 4 seconds, I would say you're >quite safe :) > >Yes, the infected PC will continue to spew out packets until it's fixed, >but >there is no danger, and your Internet bandwidth will no longer be affected. > >Cheers, >Gavin. > _________________________________________________________________ The new MSN 8: advanced junk mail protection and 2 months FREE* http://join.msn.com/?page=features/junkmail