[Zope-Coders] Warning: could not send message for past 4 hours
Mail Delivery Subsystem
MAILER-DAEMON@FH-Augsburg.DE
Thu, 14 Mar 2002 13:49:01 +0100 (MET)
This is a MIME-encapsulated message
--g2ECBMl01597.1016110141/FH-Augsburg.DE
**********************************************
** THIS IS A WARNING MESSAGE ONLY **
** YOU DO NOT NEED TO RESEND YOUR MESSAGE **
**********************************************
The original message was received at Thu, 14 Mar 2002 09:34:40 +0100 (MET)
from mail.python.org [63.102.49.29]
----- The following addresses had transient non-fatal errors -----
<klever@multimedia.fh-augsburg.de>
----- Transcript of session follows -----
<klever@multimedia.fh-augsburg.de>... Deferred: Connection timed out with mailserv.multimedia.fh-augsburg.de.
Warning: message still undelivered after 4 hours
Will keep trying until message is 5 days old
--g2ECBMl01597.1016110141/FH-Augsburg.DE
Content-Type: message/delivery-status
Reporting-MTA: dns; FH-Augsburg.DE
Arrival-Date: Thu, 14 Mar 2002 09:34:40 +0100 (MET)
Final-Recipient: RFC822; klever@multimedia.fh-augsburg.de
Action: delayed
Status: 4.4.1
Remote-MTA: DNS; mailserv.multimedia.fh-augsburg.de
Last-Attempt-Date: Thu, 14 Mar 2002 13:49:01 +0100 (MET)
Will-Retry-Until: Tue, 19 Mar 2002 09:34:40 +0100 (MET)
--g2ECBMl01597.1016110141/FH-Augsburg.DE
Content-Type: message/rfc822
Return-Path: <zope-coders@zope.org>
Received: from mail.python.org (mail.python.org [63.102.49.29])
by FH-Augsburg.DE (8.11.3/8.11.3) with ESMTP id g2E8Yek23931
for <klever@multimedia.fh-augsburg.de>; Thu, 14 Mar 2002 09:34:40 +0100 (MET)
Received: from [63.102.49.30] (helo=cvs.baymountain.com)
by mail.python.org with esmtp (Exim 3.35 #2)
id 16lQgy-0005NT-00; Thu, 14 Mar 2002 03:34:32 -0500
From: "Collector: Zope Bugs and Patches ..." <zope-coders@zope.org>
To: Nik Klever <klever@multimedia.fh-augsburg.de>, klm <klm@zope.com>,
Brian <brian@zope.com>, chrism <chrism@zope.com>, paul <paul@zope.com>
Subject: [ZC] 294/ 1 Request ".ida Worm"
X-Recipients-debug: ['Anonymous User', 'Anonymous User', 'klm', 'Brian', 'chrism', 'paul']
Message-Id: <E16lQgy-0005NT-00@mail.python.org>
Date: Thu, 14 Mar 2002 03:34:32 -0500
Issue #294 Update (Request) ".ida Worm"
** Security Related ** (Confidential)
Status Pending_confidential, Zope/bug critical
To followup, visit:
http://collector.zope.org/Zope/294
==============================================================
= Request - Entry #1 by Anonymous User on Mar 14, 2002 3:34 am
Because of two attacks of the .ida Worm (see http://www.eeye.com/html/Research/Advisories/AL20010717.html) my 2.5.0 server crashed without any hint - the last entry in the error log is:
2002-03-14T03:50:00 ERROR(200) ZServer Bad HTTP request: 'GET /default.ida?NNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u7
801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u000
3%u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0'
just the same as in the log file:
208.179.44.83 - Anonymous [14/Mar/2002:04:50:00 +0200] "GET /default.ida?NNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN%u9090%u6858%ucbd3%u780
1%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u9090%u8190%u00c3%u0003%
u8b00%u531b%u53ff%u0078%u0000%u00=a HTTP/1.0" 400 268 "" ""
Are there any suggestions, hints ?
==============================================================
--g2ECBMl01597.1016110141/FH-Augsburg.DE--