Re: email address probes

From: Ned Fleming (nedat_private)
Date: Thu Feb 06 2003 - 07:07:05 PST

Next message: Axel Beckert - ecos gmbh: "Re: email address probes"

Previous message: Dave Laird: "Re: email address probes"
In reply to: Andy Bastien: "email address probes"
Next in thread: Andy Bastien: "Re: email address probes"
Reply: Andy Bastien: "Re: email address probes"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Wed, 5 Feb 2003 20:54:19 +0000, Andy Bastien
<lists+incidentsat_private> wrote:

[snip]

>I'd like to be able to stop these attempts, but I can't think of a way
>to do it.  All of the attempts are coming from valid servers from some
>domains that we can't block.  They do all have null reverse-paths
>(MAIL FROM:<>), but I don't think that we can reject on this criteria

Maybe you're being joe-jobbed. To wit: A spammer is using your domain
name as the "From: xyzat_private" or "Reply-To:" address on the spam
he's spewing.

	http://www.spamfaq.net/terminology.shtml#joe_job


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Axel Beckert - ecos gmbh: "Re: email address probes"
Previous message: Dave Laird: "Re: email address probes"
In reply to: Andy Bastien: "email address probes"
Next in thread: Andy Bastien: "Re: email address probes"
Reply: Andy Bastien: "Re: email address probes"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Feb 06 2003 - 09:46:53 PST