This is just another case of "if you block it you are liable". This guy is apparently going to have criminal charges brought against him. That should be a major wake up call for any of you blocking messages! The ORBS case made that clear.
-Joe ----- Original Message ----- From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, March 21, 2002 1:32 PM Subject: Re: [IMail Forum] ORBZ shut down > > >if this is how he want to do business... without thought or consideration > >of others.... well... see ya! > > > >"It seems one of Gulliver's tests to validate whether a server is really > >an open relay or not was causing Lotus Domino machines to crash. One of 10 > >or so e-mail tests routinely conducted, the code in one was causing Domino > >SMTP servers to enter an endless mail loop, consuming 100 percent of the > >CPU and putting it out of commission. > > > >Laura Atkins, newly installed president of the non-profit anti-spam outfit > >SpamCon Foundation, said the code changes needed to correct the bug was > >"trivial" but one Gulliver, for one reason or another, was unwilling to > >correct." > > So it's OK for a Fortune 500 company not to take a few minutes to fix a > major security issue with their software, but a small organization that is > helping reduce the amount of unwanted material on the Internet (for free) > has to make changes to their software to bypass the flaw (which would only > prevent the DoS situation in some cases, not all)? > > I'm surprised that ORBZ didn't work around this issue -- they really should > have check the SMTP greeting, and if it indicated a Lotus server, it should > have not run any tests, and automatically blacklisted the server. That is > the *only* feasible alternative to the Lotus problem, but that would also > punish anyone running Lotus who found a way to fix the problem (and would > punish anyone using a fixed version of Lotus). > > It certainly makes Ipswitch look good, though; they are very quick to > release patches when security issues come up. They would never sit on a > DoS attack for 6 months! > > -Scott > --- > Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for > IMail. http://www.declude.com > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > > Please visit http://www.ipswitch.com/support/mailing-lists.html > to be removed from this list. > > An Archive of this list is available at: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > > Please visit the Knowledge Base for answers to frequently asked > questions: http://www.ipswitch.com/support/IMail/ > Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
