Re: Attachment:
I wonder how many qmail users got this one!

We patched qmail-smptd some time ago, and indeed, our server will
immediately reject invalid recipients!  This was allowing a user to use
a dictionary and 'steal' usernames.  Then I find out from this message
that it is a commercial product!

I would check this guys page for your domains, because 3/6 of the ones I
checked were in there (and we are not a very large ISP).

At the risk of publisizing the program, it is located at
http://www.earthonline.com.  Let the flaming commence!  There have been
quite a few admins contemplating legal action.  Luckily, qmail has stood
up to countless attacks of this type.  I guess luck doesn't have much to
do with it.. Thanks again DJB, MrSam, and contributors!

--
------------------------------------------------------------------------

// Jere Cassidy  -  System Administration - D&E SuperNet
        email: [EMAIL PROTECTED]    phone: (717)738-7054
        web: http://www.desupernet.net/jere
        pager/pcs: [EMAIL PROTECTED] - (717)203-0042
~~~ "While sowing the seeds of Utopia,
 you invoked a convenient amnesia" -BR ~~~
------------------------------------------------------------------------





Sorry for the intrusion, but I thought you might like to know about a program that has 
been abusing mail servers for several months. The program 
has DOMAINS hard coded into the program and yours is one of them.

This may or may not effect your SMTP server depending on how your SMTP is setup and 
what brand it is etc.

Your domain was extracted from the version 3.3 and in version 3.4 they encrypted the 
domains in the program so that they are no longer easily 
readable.

For information on the program and what it does to your SMTP server you can point your 
browser to http://www.l8r.com/nwa/nwa1.htm.

Again, if your not concerned about people scanning your SMTP server with dictionaries 
of username names to generate email list of your users 
(for use of UCE and SPAM) then by all means delete this message and ignore it. if your 
tired of the oversized log files and the Spam your getting 
you may want to take some sort of action.

I am posting this information on my own and any opinion is that of my own.

-paul

P.S. If you recieved a duplicate of this with the message repeating itself in the body 
I appoligize as I had a problem witht he mailer that was 
sending the email.



Reply via email to