DUH (to me), Len is right it could be an inside job. A client of ours just
canned two employees for spamming from their job site. They created their
own web based business and proceeded to spam everywhere on the net about it.
The company got complaints and investigated it. How their web business
makes enough for them to live off of.
Kevin Childers
Mail Administrator
[EMAIL PROTECTED]
The Carolina's Fastest Internet Service Provider
www.NetQuick.net
(910) 486-7845 Ext. 23
(888) 228-0312
----- Original Message -----
From: "Len Conrad" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, July 27, 2000 4:13 AM
Subject: Re: [IMail Forum] bad list address
>
> >When I create a listserv, unfortunately when there is a bad email address
> >in the list, it kept sending out the same email message to everybody on
> >the list (around twenty times or so). This is very annoying.
>
> no kidding!!! ouch!!
>
> >Is there anyway to solve this problem???
>
> ipswitch??
>
> >Well my supervisor gave me enough hard time...
>
> I bet
>
> >Today she was complaining and went off the subject
>
> then give her a hard time for "thread drift"
>
> >and said people CRACK into Imail and send spam using accounts like
> >administrator...
>
> does she have proof of this??
>
> >I explained that spammer spoof the header and sent out spam mails.
>
> a spammer within your organization and/or within your ip blocks? What
are
> is your Imail "relay options" settting?
>
> >She doesn't seem to UNDERSTAND how this works! she kept saying...
> >if someone can get into us (log into our mail server page... and send out
> >spam from there...)
>
> That's a very slow way to spam, may all your spammers be HTTP Web Mail
> spammers!
>
> >this is very unsecure.
>
> They have to log in. If your own users are sending spam from Web
> Messaging, then you have a social/political pb to which there is no
> technical solution.
>
> >She doesn't understand how the spammer send out the SPAM. how do they
send
> >that out that many emails???
>
> How many is that? Did they send it via Web Messaging or by SMTP sending
> from a mail pgm?
>
> >from my understanding, spammers are not actually logging into (cracking
> >passwords) our server. It is using mail programs like the one in Netscape
> >and IE that provides SMTP and don't check for username and password. am I
> >correct?
>
> You must use "relay for addresses" and SMTP AUTH in Imail and in the mail
> client to protect your server. SMTP AUTH requires the sender to provide
> valid accnt name and password before relaying mail through your
> server. But if your own people are spamming using their accounts on your
> server, then you should study your logs carefully to see what account they
> are using (requires you to have SMTP AUTH activated).
>
> >then my supervisor went off
>
> like a firecracker??
>
> >and said how can we trust IMail...
>
> All e-mail, unencrypted, is as secure as postcards. Imail can be set up
to
> defend against spamming. Just Do It.
>
> >how can we keep using this mail server...
>
> follow the rules
>
> > we should switch.....
>
> Don't swtich, fight!
>
> >Does anyone know what alternative mail servers are out there?
>
> There are lots of alternatvie and they are all attacked by spammers.
>
> You need to install technical spam defenses of Imail and have Terms of
> Service for your users that forbid spamming and then kill their account if
> they violate those terms.
>
> >I'm sure switching server won't solve the open relay hole problem.
>
> No, there a 10's of 1000's of open relay mail servers out there and they
> are not all Imail.
>
> Now, you say you're running Imail as open relay? Don't do that.
>
> >But if anyone can help, much appreciate! thanks! ^_^'
>
> Close your open relay.
>
> Len
>
>
> http://BIND8NT.MEIway.com: ISC BIND 8.2.2 p5 installable binary for NT4
> http://IMGate.MEIway.com: Build free, hi-perf, anti-spam mail gateways
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
