[Dshield] SMTP question....
vinu at hiwaay.net
Mon Aug 8 17:08:57 GMT 2005
Did they say that you had an open relay, or was there a spamming agent. I
doubt they would black list your IP if it was coming from another IP on
your network. At this point it is really dependent on how your network
is setup. The other thing is there may be false complaints, which has
been known to happen, however I have never seen them block because of a
few false complaints.
BTW in the eyes of SpamCop, you basically have to say that you have the
problem fixed, depending on the problem. Open relays are a little bit
different. So in this case its more they have already proved you guilty,
now you have to tell them you fixed it.
On Mon, 8 Aug 2005, Mrcorp wrote:
> Correct me if I am wrong, but isnt it possible that someone spoofed your address and that might be
> how you got there?
> And why should we have to prove innocence by capturing logs and sending? Should't one have to be
> proven guilty to be placed on the list?
> --- Valdis.Kletnieks at vt.edu wrote:
> > On Mon, 08 Aug 2005 11:54:30 EDT, Richard Golodner said:
> > > running an unknown spamming agent on their workstation. I have nine branches
> > > and all of the mail comes through corporate. If anyone has any ideas please
> > > reply to me off list or on so that others may learn as well.
> > Most likely, the problem is you only *thought* all mail came through corporate. ;)
> > Remember that unless your firewall is blocking/redirecting all outbound SMTP
> > traffic that isn't from the corporate mailserver, there's no reason why spamware
> > on a PC can't make its own outbound SMTP connections. Just because Outlook
> > isn't designed to doesn't mean a Windows app can't do it..
> > >
> > _______________________________________________
> > send all posts to list at lists.dshield.org
> > To change your subscription options (or unsubscribe), see:
> > http://www.dshield.org/mailman/listinfo/list
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list
More information about the list