Actually, he's not in trouble for blocking anything... He did a legitimate test that had an unfortunate result... Now it is out of hand.
| -----Original Message----- | From: [EMAIL PROTECTED] | [mailto:[EMAIL PROTECTED]] On Behalf Of Joe Wolf | Sent: Thursday, March 21, 2002 4:08 PM | To: [EMAIL PROTECTED] | Subject: Re: [IMail Forum] ORBZ shut down | | | This is just another case of "if you block it you are | liable". This guy is apparently going to have criminal | charges brought against him. That should be a major wake up | call for any of you blocking messages! The ORBS case made that clear. | | -Joe | ----- Original Message ----- | From: "R. Scott Perry" <[EMAIL PROTECTED]> | To: <[EMAIL PROTECTED]> | Sent: Thursday, March 21, 2002 1:32 PM | Subject: Re: [IMail Forum] ORBZ shut down | | | > | > >if this is how he want to do business... without thought or | > >consideration of others.... well... see ya! | > > | > >"It seems one of Gulliver's tests to validate whether a server is | > >really an open relay or not was causing Lotus Domino machines to | > >crash. One of | 10 | > >or so e-mail tests routinely conducted, the code in one was causing | Domino | > >SMTP servers to enter an endless mail loop, consuming 100 | percent of | > >the CPU and putting it out of commission. | > > | > >Laura Atkins, newly installed president of the non-profit anti-spam | outfit | > >SpamCon Foundation, said the code changes needed to | correct the bug | > >was "trivial" but one Gulliver, for one reason or another, was | > >unwilling to correct." | > | > So it's OK for a Fortune 500 company not to take a few | minutes to fix | > a major security issue with their software, but a small | organization | > that is helping reduce the amount of unwanted material on | the Internet | > (for free) has to make changes to their software to bypass the flaw | > (which would only prevent the DoS situation in some cases, not all)? | > | > I'm surprised that ORBZ didn't work around this issue -- they really | should | > have check the SMTP greeting, and if it indicated a Lotus server, it | should | > have not run any tests, and automatically blacklisted the server. | > That is the *only* feasible alternative to the Lotus | problem, but that | > would also punish anyone running Lotus who found a way to fix the | > problem (and would punish anyone using a fixed version of Lotus). | > | > It certainly makes Ipswitch look good, though; they are | very quick to | > release patches when security issues come up. They would | never sit on | > a DoS attack for 6 months! | > | > -Scott | > --- | > Declude: Anti-virus, Anti-spam and Anti-hijacking solutions | for IMail. | > http://www.declude.com | > | > --- | > [This E-mail was scanned for viruses by Declude Virus | (http://www.declude.com)] | > | > | > Please visit http://www.ipswitch.com/support/mailing-lists.html | > to be removed from this list. | > | > An Archive of this list is available at: | > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ | > | > Please visit the Knowledge Base for answers to frequently asked | > questions: http://www.ipswitch.com/support/IMail/ | > | | | Please visit http://www.ipswitch.com/support/mailing-lists.html | to be removed from this list. | | An Archive of this list is available at: | http://www.mail-archive.com/imail_forum%| 40list.ipswitch.com/ | | | Please visit the Knowledge Base for | answers to frequently asked | questions: http://www.ipswitch.com/support/IMail/ | | Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
