Re: [IMail Forum] Blocking GeoList Attacks - Security Hole

[## Dusty Carden]

I think the point was missed here.  This was not local users that
SPAMmed or sent NUL messages to the list.  The attack was a
dictionary attack which managed to send to the list from a NUL
address.

When the dictionary was run on the machine the list name returned
as a valid username.  So when the SPAM was sent to that name,
it went everywhere.

Dusty

----- Original Message ----- 
From: Rubens Altimari <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, May 26, 1999 2:43 PM
Subject: Re: [IMail Forum] Blocking GeoList Attacks - Security Hole


>But who would guess that my list was moderated by
zippymcgoo?

    It appears as the sender! If there is a way to hide this information, I
can't find it!

Rubens