nanog mailing list archives
Re: Port 25 - Blacklash
From: Joe Maimon <jmaimon () ttec com>
Date: Wed, 27 Apr 2005 10:59:16 -0400
Suresh Ramasubramanian wrote:
You forgot to add the ability to rate-limit by ip sender or by authenticated user, all tools in bringing trojaned users under control.On 4/27/05, Joel Jaeggli <joelja () darkwing uoregon edu> wrote:In any event the malware is already ahead of port 25 blocking and is leveraging ISP smarthosting. SMTP-Auth is the pill to ease this pain/Really smtp-auth will solve it? or do most windows mua's cache your password?They sure do cache the password. But with smtp auth, the infected user is stamped in the email headers, and all over my MTA logs, when a bot that hijacks his PC starts spamming. I can easily remove auth privileges for his account, and/or limit his access to a walled garden till such time as he cleans up - without taking the trouble to match timestamps of the spam + dig into radius logs Easier to identify, and easier to lock down, than unauthenticated access --srs
Current thread:
- FW: Port 25 - Blacklash Paul Ryan (Apr 26)
- Re: FW: Port 25 - Blacklash Matt Ghali (Apr 26)
- Re: FW: Port 25 - Blacklash Eric Gauthier (Apr 26)
- Re: Port 25 - Blacklash Adam Jacob Muller (Apr 26)
- Re: Port 25 - Blacklash Hank Nussbacher (Apr 26)
- Re: Port 25 - Blacklash Valdis . Kletnieks (Apr 26)
- Re: Port 25 - Blacklash Daniel Golding (Apr 26)
- Re: Port 25 - Blacklash Alexei Roudnev (Apr 27)
- Re: Port 25 - Blacklash Joel Jaeggli (Apr 27)
- Re: Port 25 - Blacklash Suresh Ramasubramanian (Apr 27)
- Re: Port 25 - Blacklash Joe Maimon (Apr 27)
- Re: Port 25 - Blacklash Valdis . Kletnieks (Apr 27)
- Re: Port 25 - Blacklash Suresh Ramasubramanian (Apr 27)
- Re: Port 25 - Blacklash Adam Jacob Muller (Apr 26)
- Re: Port 25 - Blacklash Matthew S. Hallacy (Apr 27)
- <Possible follow-ups>
- RE: Port 25 - Blacklash Hannigan, Martin (Apr 26)
- Re: Port 25 - Blacklash Florian Weimer (Apr 26)
- RE: Port 25 - Blacklash Hannigan, Martin (Apr 26)
- Re: Port 25 - Blacklash Dave Rand (Apr 26)
- Re: Port 25 - Blacklash Valdis . Kletnieks (Apr 26)
- Re: Port 25 - Blacklash Dave Rand (Apr 26)