Glen Eustace wrote:
On Thu, 2006-06-15 at 08:02 +1200, Justin Cook wrote:
He's offering Squirrelmail. I've seen squirrelmail used to relay spam lately (some of it using my domain as the return address, grr.) so perhaps he's not a complete bad guy. Maybe you could suggest to him to check that he has the latest version.
We have been a victim of this several times in the last couple of months. The spammer creates a legitimate account and then has a robot that he/they use to drive squirrelmail to send their spam. We have had to put a number of measures in place to prevent this form of abuse.
Such spammers can be *very* persistent. One of our faculties operated a web based mail system for students (not Squirrelmail) and had a very persistent hacker who systematically worked around what ever restrictions they put in place over a period of a few months. They finally made it more trouble than it was worth to abuse. Russell.