Re: [fw-wiz] sendmail spamming

From: Chuck Swiger (chuck_at_codefab.com)
Date: 05/29/03

  • Next message: Behm, Jeffrey L.: "RE: [fw-wiz] sendmail spamming"
    To: "Robert E. Martin" <rmartin@fishburne.org>
    Date: Thu, 29 May 2003 13:28:11 -0400
    

    Robert E. Martin wrote:
    [ ... ]
    > I have just finished locking up and exploit in our email server. This
    > spawned from a formmail script left on our web server I neglected to
    > delete.

    Good. That is, it's good that you're securing your server. It's not good that
    you need to do so in order to prevent someone else from abusing your resources.

    > I noticed CPU activity spikes on the email server and found that our web
    > server was spamming our email server due to the classic formmail exploit.
    > My question is this. What is the motivation behind such an expliot? What
    > is there to gain from this other than job security for a person like me?
    > This kind of action makes no sense to me.

    The motivation behind spamming is simple: greed. Spammers get paid somewhere
    between two and five cents per delivered message, which is why they'll send tens
    of thousands of messages at a time.

    -Chuck

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


  • Next message: Behm, Jeffrey L.: "RE: [fw-wiz] sendmail spamming"

    Relevant Pages

    • RE: SMTP delay
      ... If you choose to forward emails to the ISP's email server (smart ... To enable Message Tracking: ... Microsoft CSS Online Newsgroup Support ...
      (microsoft.public.windows.server.sbs)
    • New Linux server suggestions
      ... We are getting ready to replace our generic Linux email server (also ... for the most part (email setup, dns updates, etc...). ...
      (linux.redhat)
    • =?ISO-8859-1?Q?ADCD_based_SMTP_email?=
      ... My router setup allows me to get to the ADCD ... internet with no problems using the name server from my DSL connection. ... on the internet, when SMTP queues the mail to the external email server, it ... SMTP email from their home network? ...
      (bit.listserv.ibm-main)
    • Re: Web Server 2003
      ... you can run your own email server if you want to. ... > I have a home web site "Pictures mostly" and then I run a web site for ... But it is unclear what you mean by "local email server". ...
      (microsoft.public.inetserver.iis)
    • Re: Email Monitoring
      ... I can get the incoming easily. ... > options using MIMEDefang and milter-bcc. ... server to point to some other email server on the Internet. ...
      (Fedora)