Hi
..
We use the IMail
user database for all the organizations we host for. A question that I
have personally tried to figure out but have had no luck in finding answer for
is:
- Can anyone
simply harvest all users from the IMail database?
We have the
following services stopped, since they are either not being used or we have felt
they just allow more access to the system:
-
Password
- Who is
-
Finger
-
IMap
-
LDAP
Looking at logs we
see SPAMers that send the same e-Mail to everyone in a domain as if they knew
all users. Of course they might have obtained this from the days we were
in Exchange server, but I am just curious if anyone can simply harvest all users
in a domain?
Regards,
Kami
