Re: How did we get spammed?


Subject: Re: How did we get spammed?
From: Pierre Abbat (phma@oltronics.net)
Date: Wed Dec 19 2001 - 08:54:45 CST


On Wednesday 19 December 2001 05:15, Tomas Frydrych wrote:
> Sorry Hub, I consider this far from closed, this is way too serious
> to just ignore.
>
> If the abisource.com addresses do not get through without
> subscription, then I do want to know *how* the spam did get on the
> list, because for the spammer to be subscribed to it, he would have
> to hack our server -- there is no way s/he could have validated
> subscription for <Research@Make-Cents.abisource.com> without
> actually being able to receive mail at that address. So either there
> is a security hole in the mailing list software, or we have been
> hacked, and in either case we need to get to the bottom of it.

I suggest blocking 203.177.32.0 - 203.177.79.255 at the firewall level until
you figure this out. Hopefully the Tagalog translator is not in this netblock.

phma



This archive was generated by hypermail 2b25 : Wed Dec 19 2001 - 08:54:59 CST