On Sat, Jan 10, 2004 at 12:38:22AM +0100, Henrik Nordstrom wrote:
> On Fri, 9 Jan 2004, Payal Rathod wrote:
>
> > Can you please explain what you mean by that?

>
> That your blacklist maybe does not match the server accessed while
> browsing the hotmail service, only the server accessed on the first access
> when logging in to the hotmail account.


Now I am blocking from 09:21-09:23
with domains,
dstdomain .yahoo.com .hotmail.com .rediffmail.com .indiatimes.com
..rediff.com .msn.com

But after say 2 mins of inactivity I get "acces denied" error.
Is this normal?
Part of acces.log is given below. This was at 09:24.

1073706785.713 285 192.168.10.11 TCP_MISS/200 5246 POST
http://email.indiatimes.com/cgi-bin/demail.cgi - DIRECT/203.199.93.4
text/html
1073706786.072 359 192.168.10.11 TCP_MISS/200 694 GET
http://203.199.70.247/cgi-bin/adceptdelivery.cgi? -
DIRECT/203.199.70.247 text/html
1073706786.602 273 192.168.10.11 TCP_MISS/200 12383 GET
http://203.199.70.247/cgi-images/pla...612/loc468.gif -
DIRECT/203.199.70.247 image/gif
1073706785.713 285 192.168.10.11 TCP_MISS/200 5246 POST
http://email.indiatimes.com/cgi-bin/demail.cgi - DIRECT/203.199.93.4
text/html
1073706786.072 359 192.168.10.11 TCP_MISS/200 694 GET
http://203.199.70.247/cgi-bin/adceptdelivery.cgi? -
DIRECT/203.199.70.247 text/html
1073706786.602 273 192.168.10.11 TCP_MISS/200 12383 GET
http://203.199.70.247/cgi-images/pla...612/loc468.gif -
DIRECT/203.199.70.247 image/gif
1073706800.516 731 192.168.10.11 TCP_MISS/200 5178 POST
http://email.indiatimes.com/cgi-bin/demail.cgi - DIRECT/203.199.93.4
text/html
1073706800.906 390 192.168.10.11 TCP_MISS/200 2462 GET
http://203.199.70.247/cgi-bin/adceptdelivery.cgi? -
DIRECT/203.199.70.247 text/html
1073706801.449 184 192.168.10.11 TCP_MISS/200 7519 GET
http://203.199.70.247/cgi-images/as/...ara_banner.swf -
DIRECT/203.199.70.247 application/x-shockwave-flash

Thanks a lot.
Regards,
-Payal


--
For GNU/Linux Success Stories and Articles visit:
http://payal.staticky.com