>I think if you are testing servers for weaknesses, the first thing you
>should do is tell the folks with the server there is a problem... I bet many
>of those folks who fail haven't a clue an issue exists....... once informed,
>if they do nothing about it well... then that is an issue... but if your
>first response is to put them on a blacklist (in semi-secret) I really think
>that is a disservice... you are punishing folks for a problem they may not
>be aware of.... adversely impacting their business and livelihood....
True. But you can blame the clueless admins for this problem.
The open relay testers used to notify that admins that they were running
open relays. But guess what happened? A lot of them started sending
"cartooney threats". If you find 1,000 open relays and notify them that
you are putting them in a blacklist, 100 may send these cartooney threats,
and 1 or 2 may start a frivolous lawsuit. If you silently add them to the
blacklist, you get may 2-3 cartooney threats, and no frivolous lawsuits.
-Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
IMail. http://www.declude.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/
