RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole

2007-02-07 Thread John T \(lists\)
Well, might be news to you but Imail has the same problem. There was
discussion about this on the Imail list awhile back and IIRC Kevin said it
is now on the list of features to be added.

 

John T

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael
Jaworski
Sent: Wednesday, February 07, 2007 6:30 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] SmarterMail Admins - Relay Hole

 

We have been using Declude, Sniffer and invURIBL for years now with great
success. But yesterday we got bit by a phish attack through SmarterMail.
They used SMPT authentication to bypass all the time and money we spent on
defenses against the bad guys. The root of the problem:  SmarterMail is
lacking simple password rules.  For more of the story see: 

 

http://forums.smartertools.com/forums/27627/ShowThread.aspx#27627

 

Michael


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole

2007-02-07 Thread Chris Asaro
Are you using the Declude Hijack functionality?  That would have quarantined
any unauthorized bulk mail from leaving the system.

 

 

Chris 

 

 

 

 

 

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(lists)
Sent: Wednesday, February 07, 2007 11:41 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole

 

Well, might be news to you but Imail has the same problem. There was
discussion about this on the Imail list awhile back and IIRC Kevin said it
is now on the list of features to be added.

 

John T

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael
Jaworski
Sent: Wednesday, February 07, 2007 6:30 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] SmarterMail Admins - Relay Hole

 

We have been using Declude, Sniffer and invURIBL for years now with great
success. But yesterday we got bit by a phish attack through SmarterMail.
They used SMPT authentication to bypass all the time and money we spent on
defenses against the bad guys. The root of the problem:  SmarterMail is
lacking simple password rules.  For more of the story see: 

 

http://forums.smartertools.com/forums/27627/ShowThread.aspx#27627

 

Michael


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole

2007-02-07 Thread Kevin Bilbee
In the meantime a javascript could be added to the form to validate the 
password supports your requirements. I have done this with other parts of the 
interface. Like only allowing forwarding email to the same domain and Removing 
unwanted report as spam button.

 

Kevin Bilbee

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists)
Sent: Wednesday, February 07, 2007 8:41 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole

 

Well, might be news to you but Imail has the same problem. There was discussion 
about this on the Imail list awhile back and IIRC Kevin said it is now on the 
list of features to be added.

 

John T

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Jaworski
Sent: Wednesday, February 07, 2007 6:30 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] SmarterMail Admins - Relay Hole

 

We have been using Declude, Sniffer and invURIBL for years now with great 
success. But yesterday we got bit by a phish attack through SmarterMail. They 
used SMPT authentication to bypass all the time and money we spent on defenses 
against the bad guys. The root of the problem:  SmarterMail is lacking simple 
password rules.  For more of the story see: 

 

http://forums.smartertools.com/forums/27627/ShowThread.aspx#27627

 

Michael


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole

2007-02-07 Thread Michael Jaworski
Good point Chris. Not up to this point. We have been pretty lucky up to this
date.  We are in the process of turning it on as a stop gap against the lack
of software password rules. SmarterMail and now it looks like iMail too,
need to be part of the solution not the problem.

 

Mike

 

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris
Asaro
Sent: Wednesday, February 07, 2007 9:25 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole

 

Are you using the Declude Hijack functionality?  That would have quarantined
any unauthorized bulk mail from leaving the system.

 

 

Chris 

 

 

 

 

 

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(lists)
Sent: Wednesday, February 07, 2007 11:41 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole

 

Well, might be news to you but Imail has the same problem. There was
discussion about this on the Imail list awhile back and IIRC Kevin said it
is now on the list of features to be added.

 

John T

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael
Jaworski
Sent: Wednesday, February 07, 2007 6:30 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] SmarterMail Admins - Relay Hole

 

We have been using Declude, Sniffer and invURIBL for years now with great
success. But yesterday we got bit by a phish attack through SmarterMail.
They used SMPT authentication to bypass all the time and money we spent on
defenses against the bad guys. The root of the problem:  SmarterMail is
lacking simple password rules.  For more of the story see: 

 

http://forums.smartertools.com/forums/27627/ShowThread.aspx#27627

 

Michael


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.