Re: [SM-USERS] squirrelmail used for spam

2008-07-03 Thread Paul A
ubject: Re: [SM-USERS] squirrelmail used for spam P.A > P.A > -BEGIN PGP SIGNED MESSAGE- P.A > Hash: SHA1 P.A > P.A > Hal Pollenz wrote: P.A > | Here is what is probably happening ( it happened to us last week ) P.A > | Spammers are sending very specific pfishing emails, sample

Re: [SM-USERS] squirrelmail used for spam

2008-07-03 Thread Marc Powell
On Jul 3, 2008, at 7:25 AM, Nabin Limbu wrote: > - All exploited accounts preference were changed (Name, email, reply > address) > - All exploited accounts were forced to use signature and multiple > signatures were full of spam messages with filename in this pattern > username.si1 username.si2

Re: [SM-USERS] squirrelmail used for spam

2008-07-03 Thread Nabin Limbu
I had the same issue of spamming via my squirrelmail few days ago. Suddenly, I found large queued mails on my mail server authenticated via squirrelmail. Below are things that I found after a short analysis - All exploited accounts had same username and password. I don't how did they find all the

Re: [SM-USERS] squirrelmail used for spam

2008-07-02 Thread John Fawcett
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hal Pollenz wrote: | Here is what is probably happening ( it happened to us last week ) | Spammers are sending very specific pfishing emails, sample below. | Stupid users are responding with their passwords. | Lots of log checking and quick disabling o

Re: [SM-USERS] squirrelmail used for spam

2008-07-02 Thread Hal Pollenz
Here is what is probably happening ( it happened to us last week ) Spammers are sending very specific pfishing emails, sample below. Stupid users are responding with their passwords. Lots of log checking and quick disabling of accounts is about all you can do assuming you do not have the power t

Re: [SM-USERS] squirrelmail used for spam

2008-07-02 Thread Paul Lesniewski
> Hi I'm running a version of squirrelmail by nutsmail.com. I have Tried > version, 1.4.10a_NM-9.XPBlueSky and 1.4.13_NM-12.XP_BlueSky. > > What is happening is that foreign ips, especially Nigerian ips are sending > spam through squirrelmail. > > server versions: > > postfix mail_version = 2.2.10

Re: [SM-USERS] squirrelmail used for spam

2008-07-02 Thread Paul A
July 02, 2008 3:05 PM P.A > To: [EMAIL PROTECTED]; Squirrelmail User Support Mailing List P.A > Subject: Re: [SM-USERS] squirrelmail used for spam P.A > P.A > P.A > This was also a big problem for me as well. I was able to block this P.A > by P.A > adding geoip to server and b

Re: [SM-USERS] squirrelmail used for spam

2008-07-02 Thread derek
This was also a big problem for me as well. I was able to block this by adding geoip to server and blocking all traffic from places like Africa, Asia, and parts of Europe. Pretty much all the abuse seems to come from RIPE networks (really it seems almost all the abuse on the net period comes from

Re: [SM-USERS] squirrelmail used for spam

2008-07-02 Thread Paul A
; To: squirrelmail-users@lists.sourceforge.net P.A > Subject: Re: [SM-USERS] squirrelmail used for spam P.A > P.A > On Wednesday 02 July 2008 11:38:37 Paul A wrote: P.A > > Hi I'm running a version of squirrelmail by nutsmail.com. I have P.A > Tried P.A > > version, 1.4.10a_

Re: [SM-USERS] squirrelmail used for spam

2008-07-02 Thread Rob Wright
On Wednesday 02 July 2008 11:38:37 Paul A wrote: > Hi I'm running a version of squirrelmail by nutsmail.com. I have Tried > version, 1.4.10a_NM-9.XPBlueSky and 1.4.13_NM-12.XP_BlueSky. > What is happening is that foreign ips, especially Nigerian ips are sending > spam through squirrelmail. > > serv

[SM-USERS] squirrelmail used for spam

2008-07-02 Thread Paul A
Hi I'm running a version of squirrelmail by nutsmail.com. I have Tried version, 1.4.10a_NM-9.XPBlueSky and 1.4.13_NM-12.XP_BlueSky. What is happening is that foreign ips, especially Nigerian ips are sending spam through squirrelmail. server versions: postfix mail_version = 2.2.10 Server version: