I've noticed lately a growing number of firewall syslog msgs with critical SMTP errors:
%FWSM-2-108002: SMTP replaced |: out 204.16.32.71 in x.x.x.x data: MAIL FROM:<03|m|gci0emm80|42wdr4_2_h.nfrd|_|5rjd5n2hjw7.rdlsr1w_at_me4<006>öK+<018>ª<007>ìÑ<003>#
At first I thought this was just typical spam that the firewall was tagging and it wasn't a big deal. However, I started sniffing these packets and I'm beginning to think they're legitimate emails coming from myspace.com. Is there a configuration setting that could be applied to allow this type email? I realize this would then be opening me up a bit, but I'm not sure how else to approach this problem.
Thanks in advance.
Simon
_______________________________________________
firewall-wizards mailing list
firewall-wizards_at_listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
Received on Dec 11 2006
Intro
