Mailinglist Archive: opensuse-security (220 mails)

< Previous Next >
Re: [suse-security] fw.suse.com compromised?
  • From: Chris Donaldson <serlin@xxxxxxxxxx>
  • Date: Sat, 01 Nov 2003 03:53:01 -0500
  • Message-id: <3FA3746D.6020509@xxxxxxxxxx>
Kastus wrote:

Hello,

I just received a james virus message originated at fw.suse.com (209.3.226.225)
I checked both mail log and firewall log, connection was from 209.3.226.225

Did anybody else receive that? Does it mean that fw.suse.com was compromised?

Thanks, -Kastus


Generally that just means someone just spoofed the from header on the email and not comprimised anything... It's a pretty simple process and spammers have a habit of doing it fairly regularly.

--
Chris


< Previous Next >
List Navigation
Follow Ups
References