RE: RES: RE: Directory Harvest Attack
- From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
- To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
- Date: Mon, 6 Dec 2004 12:45:12 -0800
Well, it could go either way. It used to be that what you are seeing was
indeed address harvesting. However, there are several viruses now that are
intended to spread spam by brute force. What this means is that they are
just sending to every address possible. In this case, often times the NDR
for the non-existent local address will actually bounce as the from address
in the spam is forged.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-----Original Message-----
From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx]
Sent: Monday, December 06, 2004 11:06 AM
To: [ExchangeList]
Subject: [exchangelist] RES: RE: Directory Harvest Attack
http://www.MSExchange.org/
Oh, i forgot to mention: I own GFI 9!
My concern is not the spam entering here, but if the guy can know which
addresses are valid here, i´m afraid the volume of spam may increase
greatly.
But I guess you can´t stop a flood with a glass of water?
Tiago
_____
De: Steve Moffat [mailto:steve@xxxxxxxxxx]
Enviada em: segunda-feira, 6 de dezembro de 2004 16:57
Para: [ExchangeList]
Assunto: [exchangelist] RE: Directory Harvest Attack
http://www.MSExchange.org/
GFI
Steve
_____
From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx]
Sent: Monday, December 06, 2004 9:56 AM
To: [ExchangeList]
Subject: [exchangelist] Directory Harvest Attack
http://www.MSExchange.org/
Hello All,
I've been suffering a DHA for the last two weeks. Nothing major, just a
couple of e-mails per minute, but it is clogging my spam box with all kinds
of invalid addresses.
I've disabled NDR´s so the dude who's sending these things won't be able to
know which e-mails are valid or not.
I´ve tracked these messages and they appear to be coming from all over the
place. How can I fight it? Disabling NDR´s is not a cool solution because
people can´t know if a message was delivered here.
Thanks in advance,
Tiago
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
ExchangeMailingList@xxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
tiago@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Report abuse to listadmin@xxxxxxxxxxxxxx
_____
This E-Mail is confidential. It is not intended to be read, copied,
disclosed or used by any person other than the recipient named above.
Unauthorised use, disclosure, or copying is strictly prohibited and may be
unlawful. Optimum IT Solutions Ltd disclaims any liability for any action
taken in connection of this E-Mail. The comments or statements expressed in
this E-Mail are not necessarily those of Optimum IT Solutions Ltd or its
subsidiaries or affiliates.
<mailto:administrator@xxxxxxxxxx> administrator@xxxxxxxxxx
_____
Other related posts:
