Re: [SM-USERS] Somebody using my squirrel for SPAM

[Wm M. <mus...@cs...>]

On Fri, December 26, 2008 13:13, Frank DeChellis wrote:
> Hi,
>
> I am running Squirrel 1.4.17, Apache 1.3.37, PHP 5.2.5 , UW-IMAP 2006j2nb5
>
> and I know there were issues with cross site scripting but I¹m not sure if
> this is related.
>
> We are getting the occasional batch of spam warnings and it seems that
> somebody is using our Squirrel installation to send batches of mail from
> outside our system.
>
> Is this a known issue for which there is an easy fix :-)
>
> I¹m guessing
>
> Frank DeChellis
> President, Internet Access Worldwide
> Welland, Ontario, Canada
> www.iaw.com
>
First, have you looked at the headers of the returned messages?  Are they
originating on your mail server, or has someone just found your email
address by infecting a computer to which you have sent email?  I think we
would need more details to help you.  We host a non-profit and we get tons
of bounce back, none originating on our servers, but claiming to be from
that domain.  They have an alumni list and someone had an infected box.

------
William R. Mussatto
Systems Engineer
http://www.csz.com
909-920-9154