 |
 |
More than likely individual systems that have had security problems that have allowed it to become an open relay/proxy at some point in time. Many viruses are in circulation that open up http and socks proxies on random ports that allow for remote abuse. For example, here is a list of IP addresses at MSU that have made it into DSBL for running an open relay/proxy (multihop in some cases): 35.9.98.20 openrelay.msu.edu 35.9.5.100 Host not found. 35.9.5.26 pilot06.cl.msu.edu 35.9.5.23 pilot03.cl.msu.edu 35.9.5.32 pilot12.cl.msu.edu 35.9.5.24 pilot04.cl.msu.edu 35.9.5.29 pilot09.cl.msu.edu 35.8.163.65 infos.ent.msu.edu 35.9.5.33 pilot13.cl.msu.edu 35.9.5.38 pilot18.cl.msu.edu 35.8.152.77 sol.bch.msu.edu 35.9.5.35 pilot15.cl.msu.edu 35.9.5.21 pilot01.cl.msu.edu 35.9.5.30 pilot10.cl.msu.edu 35.9.5.28 pilot08.cl.msu.edu 35.9.5.27 pilot07.cl.msu.edu 35.9.5.40 pilot20.cl.msu.edu 35.9.6.36 list1.cl.msu.edu 35.8.3.158 barnes.cl.msu.edu 35.9.5.25 pilot05.cl.msu.edu 35.11.14.217 Host not found. 35.8.138.21 bailey.grounds.msu.edu 35.8.74.49 Host not found. 35.11.11.172 drakesa1.user.msu.edu 35.12.228.34 sagitario.egr.msu.edu 35.12.228.22 erl.egr.msu.edu 35.8.4.18 capa1.nscl.msu.edu 35.11.186.169 cholujni.user.msu.edu 35.11.128.248 gastonkr.user.msu.edu 35.11.108.150 Host not found. 35.11.174.67 user-a4c974.user.msu.edu 35.11.243.45 user-c17701.user.msu.edu 35.11.136.221 user-b5d908.user.msu.edu 35.11.186.136 hurleyk2.user.msu.edu 35.11.221.144 user-e117e8.user.msu.edu 35.11.17.82 Host not found. 35.8.73.91 Host not found. 35.11.185.214 growstac.user.msu.edu 35.11.157.137 user-289e7e.user.msu.edu 35.11.188.47 Host not found. 35.11.202.237 user-ae18d6.user.msu.edu 35.11.96.78 Host not found. 35.11.223.124 user-1ef1ad.user.msu.edu 35.11.100.134 Host not found. 35.11.131.75 dudleym7.user.msu.edu 35.11.129.220 user-ff6e44.user.msu.edu 35.11.129.170 user-fb88bf.user.msu.edu 35.11.182.74 user-a48cbb.user.msu.edu 35.11.26.64 Host not found. 35.11.25.200 Host not found. 35.11.189.137 ealytene.user.msu.edu 35.11.15.131 Host not found. 35.11.204.6 lasordac.user.msu.edu 35.11.129.27 user-40142c.user.msu.edu 35.11.22.219 mazoraar.user.msu.edu 35.11.216.44 frazeeni.user.msu.edu 35.11.129.202 user-ce580e.user.msu.edu 35.11.147.34 garciaez-2.user.msu.edu 35.11.186.174 user-7e8ba5.user.msu.edu 35.11.108.153 Host not found. 35.11.134.25 user-3c083c.user.msu.edu 35.11.134.40 user-3cef1c.user.msu.edu 35.11.182.87 user-6cfa87.user.msu.edu 35.11.193.30 soriano1.user.msu.edu 35.11.217.5 user-9e792e.user.msu.edu 35.11.157.133 user-e197eb.user.msu.edu 35.11.157.199 user-d9a330.user.msu.edu 35.11.136.25 user-9b8fe4.user.msu.edu 35.9.136.134 eb3238p01.dhcp.egr.msu.edu 35.11.221.98 user-3a1153.user.msu.edu 35.11.97.215 Host not found. 35.11.243.119 user-3f1f9a.user.msu.edu 35.11.221.51 user-ecc099.user.msu.edu 35.8.140.60 Host not found. 35.11.215.210 Host not found. 35.8.73.54 clear.msu.edu 35.11.17.216 sonjiwon-2.user.msu.edu 35.11.97.17 Host not found. 35.9.86.101 httest.msufgp.msu.edu 35.11.100.246 Host not found. 35.8.27.38 jbpc.cem.msu.edu 35.11.98.41 Host not found. 35.11.98.4 Host not found. 35.10.239.31 fw-136.user.msu.edu 35.9.5.5 idmail.cl.msu.edu 35.9.5.41 pilot21.cl.msu.edu 35.9.5.31 pilot11.cl.msu.edu 35.9.5.39 pilot19.cl.msu.edu 35.9.5.48 pilot28.cl.msu.edu 35.9.5.47 pilot27.cl.msu.edu 35.9.5.44 pilot24.cl.msu.edu 35.8.179.21 beal.cpp.msu.edu 35.8.96.163 Host not found. 35.10.216.132 Host not found. 35.11.98.7 Host not found. 35.8.133.160 olympus.bus.msu.edu 35.8.240.113 ap-12.com.msu.edu 35.8.240.8 www.com.msu.edu 35.11.97.93 Host not found. 35.11.98.25 Host not found. 35.11.182.108 alvare20.user.msu.edu 35.11.136.50 ceokari.user.msu.edu 35.11.184.142 holmesd6.user.msu.edu 35.10.63.135 Host not found. 35.11.200.217 hollada7.user.msu.edu 35.12.26.81 pm854-29.dialip.mich.net 35.11.243.38 user-b58c92.user.msu.edu 35.11.200.191 cheejohn.user.msu.edu 35.11.245.183 user-968ba5.user.msu.edu Note that almost every single one of these listings means that the IP has been abusable by third parties for any number of tasks and probably was abused in order to make it into the list (and may still be open to abuse.) Details for each IP can be looked up on: http://dsbl.org/listing AOL does its own relay / proxy testing. And uses its own blacklist to deny mail. You may also want to make sure that clients aren't trying to send mail with the outgoing mailserver of openrelay.msu.edu, which is on almost every single blacklist out there. Hope this helps. -Russell Joseph Deming wrote: > I have this problem occurring from one of my workstations. It happens > repeatedly when sending from the same computer. Doug and others have > verified (by sending test e-mails) that MSU has not been blocked as a > whole and it seems unlikely that any portion of MSU has been blocked. > More likely, individual computers have been added to their blocked IP > list. In our case, it was the one computer on my network that managed > to get a virus during the recent onslaught. This computer was > mass-mailing for a few hours one day and likely that was why it was > blocked.