The sender/owner is easily forged. Always password protect a 'moderator only' list to be safe.
Regards, David Gregg dgSoft Internet Services +1.949.584-1514 --- mxGuard for IMail Adds anti-spam *and* anti-virus capabilities to your IMail server. $99 unlimited domains/users. No service agreements. Download and install a free trial version today. http://www.mxGuard.com/Postmaster/FreeTrial.asp --- ----- Original Message ----- From: "Randy Armbrecht" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 09, 2004 10:04 AM Subject: RE: [IMail Forum] List serve question > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Welch, Tom > Sent: Wednesday, June 09, 2004 10:37 AM > To: [EMAIL PROTECTED] > Subject: [IMail Forum] List serve question > > I have a moderated list. The owner is [EMAIL PROTECTED] Only the > moderator/owner can post. How does IMail perform this check? Does it just > look at the From field and see if it matches? The reason I am asking is that > it seems a message with a virus was posted to the list. The moderator's > machine is clean. I am wondering if the From filed mhgt have been spoofed to > the moderator's address and the message was sent? Is this possible. If so, I > better make sure she password protects the list. > > Thanks, > > Tom Welch > > > Tom, > > We learned from hard knock experience that it just looks for the from > address... > > We had a list get hit from an infected computer with a new virus outbreak a > while back (during the narrow window between when a virus came out and def's > were available from Fprot) that sent an infected message from coincedently > the proper [EMAIL PROTECTED] (forged) to the proper > [EMAIL PROTECTED] and it went through; we immediately placed > a policy in force that all lists need to be password protected. > > The odds of the FROM list address matching the TO list address are slim > (this has only happened to us once in 7 years) but the damage was done that > day with that one occurance. > > Sincerely, > > Randy Armbrecht > Global Web SolutionsR, Inc. > 804-346-5300 ext. 1 > 877-800-GLOBAL (4562) ext. 1 > http://globalweb.net > > Richmond's Internet Source since 1996! > WEB HOSTING including EMAIL beginning at $29/month! > Non-Profits - receive a 25% discount! > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
