[unisog] cornell.edu blog being used for spam - and now virginia.edu as well

[Marc Perdue]

For the record, there is an anti-spam plugin installed on the  
virginia.edu blog server.  Whether it is configured correctly or not  
is another matter.  I notified the persons who I thought managed that  
server just after seeing Saqib's post.  Having been in the hospital,  
I have only just found out that the administrator is someone  
different and will be in touch with them about this ASAP.  I seem to  
recall that our postmaster sent us a notice around the time Saqib's  
post went out, but I can't find it just now.

There was a time when I would report the all-too-frequent attempts to  
hack into my servers.  Very seldom would I ever get a response when  
writing to the abuse at ....... address.  I always took it on faith that  
they would make an effort to resolve the issue, as I would if it were  
reported to me.

Marc Perdue

On Nov 24, 2007, at 5:10 PM, Ali, Saqib wrote:

> Dan: Thanks for the prompt attention to this matter. I sent emails to
> abuse and security as well yesterday.
>
> All: Seems like universities are installing http://mu.wordpress.org/
> on their servers without properly securing them to prevent against
> spammers. They are missing spam block plugins. I found another @
> http://clove.edschool.virginia.edu/wordpressmu/ that is being badly
> abused by spammers.
>
> If your university is putting up Wordpress blog servers, please ensure
> that you are installing spam block plugin as well. I think this
> problem will only get worse......
>
> I humbly request that someone from virginia.edu install proper
> anti-spam plugin on the above mentioned blog server.
>
> Thanks.
> saqib
> http://www.quantumcrypto.de/dante/
> _______________________________________________
> unisog mailing list
> unisog at lists.dshield.org
> https://lists.sans.org/mailman/listinfo/unisog

Marc Perdue
Network Administrator and Technology Security Officer
Curry School of Education
University of Virginia

O==*=#  O==*=#  O==*=#  O==*=#  O==*=#


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.sans.org/pipermail/unisog/attachments/20071129/47c4c1c2/attachment.htm