LSTOWN-L Archives

LISTSERV List Owners' Forum

LSTOWN-L

Options: Use Monospaced Font
Show Text Part by Default
Condense Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Parts/Attachments: text/plain (23 lines)
Print Reply
Mime-Version:
1.0
Content-Type:
text/plain; charset=US-ASCII
Date:
Fri, 13 Aug 1999 18:52:46 +0200
Reply-To:
LISTSERV list owners' forum <[log in to unmask]>
Subject:
From:
Siegfried Schmitt <[log in to unmask]>
In-Reply-To:
<[log in to unmask]> from Simeon ben Nevel at "Aug 13, 99 08:44:40 am"
Content-Transfer-Encoding:
7bit
Sender:
LISTSERV list owners' forum <[log in to unmask]>
>4) Once all confirmations are acknowledged, activate the forwarding
>   option and direct all incoming [log in to unmask] mail to
>   [log in to unmask]

We had such an attack a few weeks ago from an account at GMX.DE.

The perpetrator had subscribed his GMX account to 31 lists on our server
and then he set a forward to the mailbox of a member of the ZDF (one of
our national TV stations) shortly before official holidays... Since that
time we are using two simple Perl scripts to identify such attacks more
easily. The first Perl script is named 'substat' and helps to identify
multiple subscriptions from one e-mail address. The second Perl script is
named 'listcomp' and compares two or more different lists in order to find
common addresses. With these tools, it is more easy for a LISTSERV
maintainer to identify such attacks. I don't know much about Perl and I
did not create these scripts myself, so I cannot explain how these scripts
work in detail, but if you are interested, I can send a copy of these Perl
scripts.

Siegfried

PS: we are using LISTSERV 1.8c in an HP-UX 10.20 environment.

ATOM RSS1 RSS2