Many customers have shared their passwords with webmail phishers. (who want to use their webmail accounts).
We have squirrelmail webmail for our users. We had a bunch of with people from nigeria entering into our customers' webmail accounts. We installed the restrict sender plugin from the squirrelmail homepage, set it to limit the number of messages per day per sender to something reasonable our customers are not normally apt to hit. Just like magic, the spammers went elsewhere real quick. On Thu, Apr 08, 2010 at 09:01:21AM -0400, Kurt Fankhauser wrote: > I had problems with hi-jacked email accounts for months until I finally > traced it to the webmail interface. Turned off webmail and have not had a > problem since. Apparently you do not have to have the correct password to > spam from the webmail so I just turned it off. Plus that took care of > another problem were customers were not downloading their mail from the > server and just using webmail exclusively. > > Kurt Fankhauser > WAVELINC > P.O. Box 126 > Bucyrus, OH 44820 > 419-562-6405 > www.wavelinc.com > > > > -----Original Message----- > From: [email protected] [mailto:[email protected]] On > Behalf Of RickG > Sent: Wednesday, April 07, 2010 10:17 PM > To: WISPA General List > Subject: [WISPA] email issues > > I've got a client whose email ([email protected]) appears to have > been hijacked for spamming purposes. I'm not sure what to do about it. > Sample email below. Any ideas? Thanks in advance! -RickG > > *********************************************** > > From: <[email protected]> > To: <[email protected]> > Sent: Wednesday, April 07, 2010 8:50 PM > Subject: Delivery failure > > > > Message from yahoo.co.jp. > > Unable to deliver message to the following address(es). > > > > <[email protected]>: > > Sorry your message to [email protected] cannot be delivered. > > This account has been disabled or discontinued [#102]. > > > > <[email protected]>: > > Sorry your message to [email protected] cannot be delivered. This > > account has been disabled or discontinued [#102]. > > > > <[email protected]>: > > Sorry your message to [email protected] cannot be delivered. This > > account has been disabled or discontinued [#102]. > > > > <[email protected]>: > > This user doesn't have a yahoo.co.jp account ([email protected]) [-5] > > > > <[email protected]>: > > This user doesn't have a yahoo.co.jp account > > ([email protected]) [-101] > > > > <[email protected]>: > > Sorry your message to [email protected] cannot be delivered. This > > account has been disabled or discontinued [#102]. > > > > <[email protected]>: > > Sorry your message to [email protected] cannot be delivered. This > > account has been disabled or discontinued [#102]. > > > > <[email protected]>: > > Sorry your message to [email protected] cannot be delivered. This > > account has been disabled or discontinued [#102]. > > > > <[email protected]>: > > Sorry your message to [email protected] cannot be delivered. This > > account has been disabled or discontinued [#102]. > > > > <[email protected]>: > > Sorry your message to [email protected] cannot be delivered. This > > account has been disabled or discontinued [#102]. > > > > --- Original message follows. > > > > X-YahooFilteredBulk: 190.253.243.200 > > X-Originating-IP: [190.253.243.200] > > Return-Path: <[email protected]> > > Received-SPF: none ([190.253.243.200]: domain of [email protected] does > > not designate permitted sender hosts) > > Authentication-Results: mta307.mail.ogk.yahoo.co.jp from=kywifi.com; > > domainkeys=neutral (no sig) > > Received: from 190.253.243.200 (EHLO 190.253.243.200) (190.253.243.200) > > by mta307.mail.ogk.yahoo.co.jp with SMTP; Thu, 08 Apr 2010 09:43:27 +0900 > > Received: from [221.6.75.79] (helo=wxtzlmdpwyl.macfszutaxwyb.org) > > by with esmtpa (Exim 4.69) > > (envelope-from ) > > id 1MMHK8-2919sz-YH > > for [email protected]; Wed, 7 Apr 2010 19:43:25 -0500 > > From: "Major Madrid" <[email protected]> > > To: <[email protected]>, > > <[email protected]>, > > <[email protected]>, > > <[email protected]>, > > <[email protected]>, > > <[email protected]>, > > <[email protected]>, > > <[email protected]>, > > <[email protected]>, > > <[email protected]>, > > <[email protected]>, > > <[email protected]>, > > <[email protected]> > > Subject: Re: Please, conflrm you receipt > > Date: Wed, 7 Apr 2010 19:43:25 -0500 > > MIME-Version: 1.0 > > Content-Type: multipart/alternative; > > boundary="----=_aywkmxl_77_88_20" > > X-Priority: 3 > > X-Mailer: iiparxz_54 > > Message-ID: <[email protected]> > > > > ------=_aywkmxl_77_88_20 > > Content-Type: text/plain; > > charset="iso-8859-2" > > Content-Transfer-Encoding: quoted-printable > > > > Express Chemist PharmacyBuy non-prescription treatmentsonline. Discreet. = > > UK & US registered. > > ------=_aywkmxl_77_88_20 > > Content-Type: text/html; > > charset="iso-8859-2" > > Content-Transfer-Encoding: quoted-printable > > > > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> > > <HTML><HEAD> > > <META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-= > > 2"> > > <STYLE></STYLE> > > </HEAD> > > <BODY> > > <h1><font size=3D"3">Express Chemist Pharmacy</font></h1> > > > > <font size=3D"3"><a href=3D"http://housewares04.spaces.live.com";>Buy</a> = > > non-prescription treatments > > <a href=3D"http://survival65.spaces.live.com";>online</a>. Discreet. UK & = > > US registered.</font> > > </BODY></HTML> > > > > ------=_aywkmxl_77_88_20-- > > > > > > *** MESSAGE TRUNCATED *** > > > ---------------------------------------------------------------------------- > ---- > WISPA Wants You! Join today! > http://signup.wispa.org/ > ---------------------------------------------------------------------------- > ---- > > WISPA Wireless List: [email protected] > > Subscribe/Unsubscribe: > http://lists.wispa.org/mailman/listinfo/wireless > > Archives: http://lists.wispa.org/pipermail/wireless/ > > > > -------------------------------------------------------------------------------- > WISPA Wants You! Join today! > http://signup.wispa.org/ > -------------------------------------------------------------------------------- > > WISPA Wireless List: [email protected] > > Subscribe/Unsubscribe: > http://lists.wispa.org/mailman/listinfo/wireless > > Archives: http://lists.wispa.org/pipermail/wireless/ -- /* Jason Philbrook | Midcoast Internet Solutions - Wireless and DSL KB1IOJ | Broadband Internet Access, Dialup, and Hosting http://f64.nu/ | for Midcoast Maine http://www.midcoast.com/ */ -------------------------------------------------------------------------------- WISPA Wants You! Join today! http://signup.wispa.org/ -------------------------------------------------------------------------------- WISPA Wireless List: [email protected] Subscribe/Unsubscribe: http://lists.wispa.org/mailman/listinfo/wireless Archives: http://lists.wispa.org/pipermail/wireless/
