Full Disclosure mailing list archives

Re: Is the FBI using email Web bugs?


From: Ben Nelson <lists () venom600 org>
Date: Wed, 07 Jan 2004 17:33:43 -0700

Gregh wrote:
wont listen. In Zone Alarm you can tell it to DISALLOW Outlook Express (or
whatever you like) access to different ports. So, I tell it to disallow
access to or from port 80 by OE. Thus, a received HTML email with pics and
such in it just shows blanks, "x" or placeholders, really. Now, while saying
this, if you decided to use some other port to report back on, sure, you
would get around this but the majority of spam operators who spam you don't
require JUST the "click to remove" to be clicked to verify you DO exist thus
send more spam and sell the address to another spammer. They also have port
80 and if the email is clicked on by a typical OE setup, just to delete, it
"phones home". For those described earlier in this paragraph, ZA blocking OE
in/out on port 80 stops most of the phone home stuff.

Couldn't you just block all port access from OE *EXCEPT* those that are needed? (probably 25, 110, 143)

--Ben

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: