>When I create a listserv, unfortunately when there is a bad email address 
>in the list, it kept sending out the same email message to everybody on 
>the list (around twenty times or so). This is very annoying.

no kidding!!! ouch!!

>Is there anyway to solve this problem???

ipswitch??

>Well my supervisor gave me enough hard time...

I bet

>Today she was complaining and went off the subject

then give her a hard time for "thread drift"

>and said people CRACK into Imail and send spam using accounts like 
>administrator...

does she have proof of this??

>I explained that spammer spoof the header and sent out spam mails.

a spammer within your organization and/or within your ip blocks?   What are 
is your Imail "relay options" settting?

>She doesn't seem to UNDERSTAND how this works! she kept saying...
>if someone can get into us (log into our mail server page... and send out 
>spam from there...)

That's a very slow way to spam, may all your spammers be HTTP Web Mail 
spammers!

>this is very unsecure.

They have to log in.  If your own users are sending spam from Web 
Messaging, then you have a social/political pb to which there is no 
technical solution.

>She doesn't understand how the spammer send out the SPAM. how do they send 
>that out that many emails???

How many is that?  Did they send it via Web Messaging or by SMTP sending 
from a mail pgm?

>from my understanding, spammers are not actually logging into (cracking 
>passwords) our server. It is using mail programs like the one in Netscape 
>and IE that provides SMTP and don't check for username and password. am I 
>correct?

You must use "relay for addresses" and SMTP AUTH in Imail and in the mail 
client to protect your server.  SMTP AUTH requires the sender to provide 
valid accnt name and password before relaying mail through your 
server.  But if your own people are spamming using their accounts on your 
server, then you should study your logs carefully to see what account they 
are using (requires you to have SMTP AUTH activated).

>then my supervisor went off

like a firecracker??

>and said how can we trust IMail...

All e-mail, unencrypted, is as secure as postcards.  Imail can be set up to 
defend against spamming. Just Do It.

>how can we keep using this mail server...

follow the rules

>  we should switch.....

Don't swtich, fight!

>Does anyone know what alternative mail servers are out there?

There are lots of alternatvie and they are all attacked by spammers.

You need to install technical spam defenses of Imail and have Terms of 
Service for your users that forbid spamming and then kill their account if 
they violate those terms.

>I'm sure switching server won't solve the open relay hole problem.

No, there a 10's of 1000's of open relay mail servers out there and they 
are not all Imail.

Now, you say you're running Imail as open relay?  Don't do that.

>But if anyone can help, much appreciate! thanks! ^_^'

Close your open relay.

Len


http://BIND8NT.MEIway.com: ISC BIND 8.2.2 p5  installable binary for NT4
http://IMGate.MEIway.com:  Build free, hi-perf, anti-spam mail gateways

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to