Excerpts from Jim Cheetham's message of 2016-04-15 09:12:37 +1200: > Yes, we had had a compromised account, and we had addressed it before the > block became obvious.
May as well let you all know ... a newbie mistake by me. We don't have a totally automated way to close down all the various systems through which a user sends email, and while running through the manual steps I neglected to dequeue the outbound spam submissions. Proofpoint had already picked up on the initial outbound, and were dsn=421 for the remaining items. I prevented new spam from being submitted, and when we got dsn=500 from Proofpoint we noticed the issue, and requested delisting. This went through, then our queued items got delivered, triggering a repeat listing, and confusion at my end. -- Jim Cheetham, Information Security, University of Otago, Dunedin, N.Z. ✉ jim.cheet...@otago.ac.nz ☏ +64 3 470 4670 ☏ m +64 21 279 4670 ⚷ OpenPGP: B50F BE3B D49B 3A8A 9CC3 8966 9374 82CD C982 0605
signature.asc
Description: PGP signature
_______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
