Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Incidents
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

RE: Massive SPAM Increase

from [Vince Valenti] Network Security [Permanent Link]
Subject: RE: Massive SPAM Increase
Date: Tue, 17 Oct 2006 07:58:25 -0700 
On 10/16/2006 at 11:57 AM, benfell@raven.cybernude.org wrote:


Because my laptop might send mail from just about anwhere, I've had to 
configure the SPF in my DNS to say that legitimate mail from my domain 
might come from anywere.  This does not help in the slightest to isolate 
legitimate mail from my domain from "joe job" mail.


Ideally, you would send email from your laptop through another SMTP server
that you authenticate with.


From the SPF FAQ:


Can I run an SMTP server on my laptop?

If you run a personal domain, you can either not publish SPF records at all,
or set up "v=spf1 ?all" for your domain, and you'll be able to send mail
from your laptop no matter where you are. A better solution would be to set
up your own smtp server that accepts mail from your laptop through
POP-before-SMTP or SASL AUTH, so that you can still publish a more
restrictive spf record.

If you are the customer of an ISP that publishes SPF records, your ISP
should provide you with an SMTP server that you can authenticate to, using
either POP-before-SMTP or SASL AUTH. Or you can ask them to exclude you from
SPF using a user-specific "exists" mechanism.

-- 
Vince Valenti
Enterprise Systems Administrator
High Desert Education Service District

Attachment: smime.p7s
Description: S/MIME cryptographic signature

[More messages with this same subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: ***SPAM*** Re: Massive SPAM Increase {-2.6} {-2.6}, Rich Hart
Next by Date:  RE: Massive SPAM Increase, modincidents
Previous by Thread:  Re: ***SPAM*** Re: Massive SPAM Increase {-2.6} {-2.6}, Dude VanWinkle
Next by Thread:  Re: ***SPAM*** Re: Massive SPAM Increase {-2.6} {-2.6}, Jamie Riden
Indexes:  [Date] [Thread] [Top] [All Lists]