[OPLINTECH] Email Issues....again

Karl Jendretzky jendreka at oplin.org
Thu Apr 2 12:55:28 EDT 2009


All,

    SquirrelMail on the OPLIN mail server was used again, starting a 
couple hours ago to send out spam. The interface is patched to the 
newest version, so my guess at this point is that someone's 
authentication information has either been harvested or brute forced, 
and is being used to give access to the interface. While I dig deeper 
into SquirrelMail to try and find a solution I've disabled access to the 
interface for anyone outside the OPLIN ip range. If you have an external 
range in use in your library that needs access, shoot me and email and 
I'll add it to the exception list as a short term fix.

Because of this spam activity it looks like we've received a couple more 
temporary bans, which should clear up in a couple hours.

-- 
Thanks,
    Karl Jendretzky
    Technology Project Manager
    Ohio Public Library Information Network
    jendreka at oplin.org
    (614) 728-1515



More information about the OPLINTECH mailing list