Scott,
Although I don't think I (or Ipswitch) have to defend Ping Pro, it indeed
has a tool that can scan IP ranges looking for standard services running on
those IP addresses. Yes, it can find SMTP services (it only need connect to
one, to say it exists) but typically, only on port 25 (yes, one can tell it
to scan 'ports' which might cause it to find those on non-standard ports).
It cannot tell if that IP/SMTP service is an open relay (Ping Pro does not
attempt to send email), so it is not a 'spammers' tool, more like a Network
Administrators tool. Like any tool, it can be used in ways that might not
have been forseen by the makers.
BTW, if you would be so kind as to tell me where you found those
unauthorized copies of Ipswitch products, I would be most grateful. I may
even be able to wrangle a reward for you, for your effort. I cannot make any
promises on this, but will do all in my power to get you something for your
effort!!
Thanks,
Daniel Donnelly
Ipswitch Technical Support
________________________________________________________
See the Knowledge Base at http://support.ipswitch.com/kb
----- Original Message -----
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, October 04, 2000 9:39 AM
Subject: [IMail Forum] How spammers find open relays...
> As part of the research for Declude, I stumbled across the following
message
> posted in a message board for spammers. The interesting piece is the
> company that makes the software that is being recommended here!
>
> In Ipswitch's defense, it looks like WS_PingPro Pack at least limits you
to
> class B ranges for scanning, so it would take some time to find a lot of
> open relays. It also seems to report all SMTP servers, and not just open
> relays. And, they likely don't make much money from the spammers -- the
> same message board had a posting for a CD-ROM for sale with "fully working
> software" that I doubt Ipswitch has authorized.
> -Scott
>
> >> I'm thinking of buying the Data-Miner's package, Quality Control and
> >> Domain Refinery. These programs are designed to first scan for SMTP's
> >> and then determine their status... Strip your header (Anonymous)?
> >> Hide your domain? Able to get into AOL? etc, etc, etc. Does anyone
> >> have any experience with these programs? Are they worth the investment?
>
> > As far as Data-Miners programs, I've never used them. I used a program
> > called SM Scanner. It doesn't scan relay scanner I've found wasn't even
> > made for that purpose. It's called WS_PingPro Pack, and it's available
> > at www.ipswitch.com. It's way cheaper than buying Data-Miners software.
> > SM Scanner is $599 I believe, so it's pricey. You may want to start out
> > with the Data-Miners software. But I'd definitely buy WS_PingPro Pack to
> > scan for your relays.
>
>
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
