Re: suspicious mail behaviour; don't know what to make of it . . .

On Sun, 27 Feb 2011, Spyros Tsiolis wrote:

> > Date: Sat, 26 Feb 2011 13:05:35 -0800
> > From: [email protected]
> > To: [email protected]
> > Subject: Re: [xmail] suspicious mail behaviour; don't know what to make of it . . .
> >
> > On Sat, 26 Feb 2011, Spyros Tsiolis wrote:
> >
> > > Hi Bart,
> > >
> > > Thank you kindly for this.
> > > So, what you're saying is that someone managed to guess the user password for that specific
> > > XMail
> > > account (which BTW, the password was the same as the user ! - whoops !) and managed to
> > > do his worst ?
> >
> > Or, it is that user itself that sends SPAM.
> >
> >
> >
> > - Davide
> >
> >
> > _______________________________________________
> > xmail mailing list
> > [email protected]
> > http://xmailserver.org/mailman/listinfo/xmail
> 
> Hi Davide,
> 
> No, no way. Users have achieved such level of mentality as to not do damage to their
> own system :-)
> This is definitely automated by someone from the outside.
> How he managed to get access to the mailserver on the DMZ, I am still trying
> to find that one out (If I even find anything).

Well, if the password was same as user, that's the first thing brute force 
methods try.


- Davide


_______________________________________________
xmail mailing list
[email protected]
http://xmailserver.org/mailman/listinfo/xmail