RE: Website link for 212.67.202.127

Thanks for this.  I understood my email provider to be fastmail.fm as it
was one of their domains that was mentioned in your mail.  However, we
do use pipex as well.  I will write to then as you suggest and get them
to (hopefully) sort themselves out.

Regards,
Peter Monit
Barclaycard Business
Barclaycard CDUK
*Tel:	 01604 254567
*Mob:    07979 900 001
*Email: [email protected]


-----Original Message-----


Legal Disclaimer:-
Internet communications are not secure and therefore the 
Barclays Group does not accept legal responsibility for the 
contents of this message.  Although the Barclays Group 
operates anti-virus programmes, it does not accept 
responsibility for any damage whatsoever that is caused 
by viruses being passed.  Any views or opinions presented 
are solely those of the author and do not necessarily 
represent those of the Barclays Group.
From: Alexey Lobanov (dsbl) [mailto:[email protected]] 
Sent: 28 September 2005 16:52
To: Monit Peter
Cc: [email protected]
Subject: Re: [DSBL-Contact] Website link for 212.67.202.127

Hello.

On 28/09/05 19:14, Monit Peter wrote:

> This is very confusing - both sides tell me to contact the other.  I
am
> trying to send information from my customer (using my customer's email
> server) to my company email address, but it keeps bouncing because you
> refuse to let it through.  Other people are also complaining that
their
> mail to me is bouncing.  When I look at my company's email provider
they
> say they are one of the most anti-spam organisations on the planet and
> never have open relays. 

Should I assume that your e-mail provider is Pipex?

If yes: intentions and real actions are not same things. Machine
mswmx2.hosting.pipex.net 212.67.202.127 is absolutely insecure now,
because of trivial password for "admin" account. It can be used and
definitely is ised for spam, scams and other bad things without owner's
knowledge and permission.

The practical proposal is to find the technical person responsible for
mswmx2.hosting.pipex.net 212.67.202.127 machine and ask it to:

1. disconnect this compromised machine from public networks;

2. perform full security audit; depending upon audit results, it can be
necessary to reinstall the whole system from scratch;

3. restore operations.

Exactly in this sequence.

Best,
Alexey
DSBL volunteer


> They also say to point you at them in order for
> you to see what their configuration is and stop the blocking.  You
seem
> to be saying that their email administrator should get in touch to
sort
> thing out.  I don't care how this gets resolved but it need to happen
> QUICKLY!
> 
> Regards,
> Peter Monit
> Barclaycard Business
> Barclaycard CDUK
> *Tel:	 01604 254567
> *Mob:    07979 900 001
> *Email: [email protected]
> 
> 
> 
> 
> Legal Disclaimer:-
> Internet communications are not secure and therefore the 
> Barclays Group does not accept legal responsibility for the 
> contents of this message.  Although the Barclays Group 
> operates anti-virus programmes, it does not accept 
> responsibility for any damage whatsoever that is caused 
> by viruses being passed.  Any views or opinions presented 
> are solely those of the author and do not necessarily 
> represent those of the Barclays Group.
>