-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Welch, Tom
Sent: Wednesday, June 09, 2004 10:37 AM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] List serve question

I have a moderated list. The owner is [EMAIL PROTECTED] Only the
moderator/owner can post. How does IMail perform this check? Does it just
look at the From field and see if it matches? The reason I am asking is that
it seems a message with a virus was posted to the list. The moderator's
machine is clean. I am wondering if the From filed mhgt have been spoofed to
the moderator's address and the message was sent? Is this possible. If so, I
better make sure she password protects the list.

Thanks,

Tom Welch


Tom,

We learned from hard knock experience that it just looks for the from
address...

We had a list get hit from an infected computer with a new virus outbreak a
while back (during the narrow window between when a virus came out and def's
were available from Fprot) that sent an infected message from coincedently
the proper [EMAIL PROTECTED] (forged) to the proper
[EMAIL PROTECTED] and it went through;  we immediately placed
a policy in force that all lists need to be password protected.

The odds of the FROM list address matching the TO list address are slim
(this has only happened to us once in 7 years) but the damage was done that
day with that one occurance.

Sincerely,

Randy Armbrecht
Global Web SolutionsR, Inc.
804-346-5300 ext. 1
877-800-GLOBAL (4562) ext. 1
http://globalweb.net

Richmond's Internet Source since 1996!
WEB HOSTING including EMAIL beginning at $29/month!
Non-Profits - receive a 25% discount!


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to