On Fri, 13 Feb 1998, Kyle wrote:
>
>
> This brings up the question of certain programs such as Stealth Mailer.
> These programs somehow (I'm not sure how because I don't want to give such
> a company the $500 necessary to get a copy of the program to see how it
> works) gives itself a mail server domain name that doesn't exist. It then
> talks to another SMTP server, saying its passing along the mail, and then
> the mail goes on its merry way with no way to track it back to its source
> other than to the first server that accepted the mail for transfer. The
> original machine name never existed except for the moment it took to
> transfer the umpteen bajillion messages these spammers send out from the
> lists they buy from the same company. The sites usually hit are juno.com,
> aol.com, att.net, and uu.net for initial transfer. For some reason these
> companies don't verify hostnames before accepting mail from them. Beware,
> if you don't already do this, the spammers could source you as a transfer
> site.
>
This is called relaying. It is caused by older sendmail configs that
allow _anyone_ to connect and send mail from a server. We've
configured our sendmail for this not to be an issue. :)
-------------------------------------------------------------------------------
Terry E. Knab
News Administrator
Nyx Public Access Unix
Follow-Ups:
References:
|
|