Yea true the local paper just had a story about some thieves that were
sending what appeared to be spam messages to companies in the area. From
there they would get the out of office replies and then go rob those
people blind knowing exactly how long they were going to be gone.



-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Friese, Casey
Sent: Wednesday, December 18, 2002 1:17 PM
To: Exchange Discussions
Subject: RE: Ouut Oof Offfice responses - Security Risk


Cut and cross posted from another list - some good ones to think about

<Tom Meunier>
"I'm not in, but you have hit and now verified a live address. Please
put me on your "A" list for resale to other spammers."

"I'm the president of the company, and obviously wealthy. Since I've
just told you I'm away for two weeks, please go to the county tax
assessor's web site and look up the location of my residence. Help
yourself."

"Hello customer. I'm not in, and you can try contacting 
someone else in my firm who wants your business. The onus is, however,
all 
on you, as I'm too lazy to delegate my email to somebody else while
away. Please don't go visit our competitor, who is far too professional
to send you an ascii answering machine message like this." </Tom
Meunier>

-----Original Message-----
From: Candee Vaglica [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, December 18, 2002 3:30 PM
To: Exchange Discussions
Subject: RE: Ouut Oof Offfice responses - Security Risk


This might help:
http://www.equiinet.com/press/pressreleases/24_06_2002.htm

-----Original Message-----
From: Archie Call [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, December 18, 2002 3:02 PM
To: Exchange Discussions
Subject: Ouut Oof Offfice responses - Security Risk


Our company is proposing that we allow the Ouut Oof Offfice feature to
be turned on for Internet Mail in Exchange 5.5.  I have seen comments on
this newsgroup discussing many security reasons for not doing this!  I
have looked in the PDF file but am have diffculty locating this
discussion.  I remember someone who wrote a little story that was very
convincing.

The downsides I see are: potential for mail looping (bugs in Exchange or
Mailbox filled up); you tell the cyber crooks that you are gone and your
house can be robbed; you tell the spammer they have a valid address;
much increased mail traffic especially during a virus outbreat; you send
numerous messages to everyone in a ListServer.

If anyone has anything to add here, it would be greatly appreciated.

...Archie Call

Note: I misspelled OOO so as not trigger your filter.

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to