nanog mailing list archives
Re: ISP wants to stop outgoing web based spam
From: Gregory Kuhn <gkuhn () ctch net>
Date: Wed, 09 Aug 2006 10:20:35 -0600
Ken Simpson wrote:
Maybe I'm just an ignorant e-mail postmaster. I thought that nearly all e-mail was (E)SMTP-based (LMTP excepted). If it doesn't use the SMTP protocol, it's not reaching any mailbox. HTTP is a web browser protocol. WebMail gets converted by the web server and is subsequently routed using SMTP.I think he's talking about blog spam, which is definitely submitted over HTTP.
I think that the person who started this thread is talking about spam coming from the wide variety of old, poorly written form handler scripts and other programs that at some point in the program talk to the mail program on the web server and thus allow an attacker to hijack said script for the purpose of using that script to amplify their spam message(s).
As a web hosting provider I have had to shut down numerous scripts on my client's websites because of this reason.
The question that I think is being asked here is how does one go about ensuring that email coming from a web form is actually a valid contact email and not a spam amplification attack. If there are measures that can be taken, what are those measures?
Gregory Kuhn Coast to Coast Hosting
Current thread:
- Re: Captchas was Re: ISP wants to stop outgoing web based spam, (continued)
- Re: Captchas was Re: ISP wants to stop outgoing web based spam Paul Jakma (Aug 15)
- Re: Captchas was Re: ISP wants to stop outgoing web based spam Matthew Sullivan (Aug 15)
- Re: Captchas was Re: ISP wants to stop outgoing web based spam Simon Waters (Aug 16)
- Re: Captchas was Re: ISP wants to stop outgoing web based spam Richard A Steenbergen (Aug 16)
- Re: Captchas was Re: ISP wants to stop outgoing web based spam Paul Jakma (Aug 16)
- RE: ISP wants to stop outgoing web based spam Barry Shein (Aug 09)
- Re: ISP wants to stop outgoing web based spam David Andersen (Aug 09)
- Re: ISP wants to stop outgoing web based spam Matthew Black (Aug 09)
- Re: ISP wants to stop outgoing web based spam Ken Simpson (Aug 09)
- Re: ISP wants to stop outgoing web based spam Gregory Kuhn (Aug 09)
- Re: ISP wants to stop outgoing web based spam Suresh Ramasubramanian (Aug 09)
- Re: ISP wants to stop outgoing web based spam Simon Waters (Aug 10)
- Re: ISP wants to stop outgoing web based spam Suresh Ramasubramanian (Aug 10)