Shorewall users - Jan 2003 - RoadRunner Proactive Security Scan

FYI,

This is from Sans Internet Storm Center ...

http://isc.incidents.org/analysis.html?id=178

RoadRunner Proactive Security Scan
published: 2003-01-21

Recently, we did receive a number of reports indicating proxy scans from
''securityscan.sec.rr.com'' (e.g. 24.30.199.228). These scans
are part of
RoadRunners reactive relay/proxy scanning. All mail servers sending e-mail
to RoadRunner, will be scanned once a day. For more details, see

http://security.rr.com/probing.htm 

Mike

--On Monday, January 27, 2003 12:22 PM -0600 "Martinez, Mike
(MHS-ACS)"
<Mike.Martinez@mhs-helpdesk.com> wrote:
> FYI,
>
> This is from Sans Internet Storm Center ...
>
> http://isc.incidents.org/analysis.html?id=178
>
> RoadRunner Proactive Security Scan
> published: 2003-01-21
>
> Recently, we did receive a number of reports indicating proxy scans from
> ''securityscan.sec.rr.com'' (e.g. 24.30.199.228). These
scans are part of
> RoadRunners reactive relay/proxy scanning. All mail servers sending e-mail
> to RoadRunner, will be scanned once a day. For more details, see
>
> http://security.rr.com/probing.htm
>
Thanks, Mike -- I''ve been seeing these probes for some time and
wondered
why rr would be interested in my little mail server.

-Tom
--
Tom Eastep   \ Shorewall - iptables made easy
Shoreline,    \ http://www.shorewall.net
Washington USA \ teastep@shorewall.net