Unauthorized Outgoing E-Mail

J.K. · 28th April 2005, 01:54 PM

Hey Gang..

Just an open ended question. Does anyone have any low cost ideas for protecting a server from unauthroized outgoing e-mail?

The person that I work with on these things has suggested a program named Declude (http://www.declude.com/SearchResults.asp?Cat=10) however, that seems a little little pricey to me.

Truth be told, I'd love open source.. lol

**Mr. Tech** · 28th April 2005, 04:10 PM

I've never tried one before but I'll have an ask around and see if I can find anything.

J.K. · 28th April 2005, 11:28 PM

Thanks, Tech... But don't put yourself out.

I tried searching for some solutions and didn't really find very much. Perhaps I'm using the wrong keyword phrases. I have to admit that like so many things this is an area just don't know a whole lot about.

From what I understand, however, the malicious activity isn't a full blown hack. Rather, it's an exploitation of one of your ports. The spammer just funnels the e-mail through your opening. By analyzing your e-mail log files you can see the attack. By examining mine I recenly found some abuse and an IP from someone in Korea. So, I'm naturally wanting to cut him off.

I'm also wondering how effective a simple IP Blocker like Peer Guardian might be on this, or even if that's a correct application for it.

I dunno, but will post back if I find out.

Cheers!

**Mr. Tech** · 29th April 2005, 09:28 AM

Wouldn't this be your web host who should look into protecting this for you? They may be able to help... The only email protection I've ever sued are spam filters...

J.K. · 29th April 2005, 02:34 PM

Hey Tech..

Sorta. I can call em but it's a dedicated server. Rather than call them then which might result in an expense, I usually turn to a friend/collegue of mine who's an admin. She's the one who recommended Declude, and I'm sure she's right but I'm just looking for something less expensive.

I'm cheap..

lol

**Mr. Tech** · 29th April 2005, 02:40 PM

Aren't we all cheap when it comes to the internet? There's always someone offering something for a dirt cheap price if not for free

I'm not sure if you're going to get an protector for that cheap to be honest. Good luck though!

**Mr. Tech** · 3rd May 2005, 09:54 AM

Here are some reply's I got. One after the other:

"Why doesn't he just make it closed relay? And only allow it to relay from his domain.

Then only mail using his domain can be sent through it."

**Mr. Tech** · 3rd May 2005, 09:55 AM

"A properly setup mail server with authentication should not be a problem. If the machine is hacked you're screwed anyway, but you should hopefully notice and get your machine cleaned up asap.

I guess a really cheap way to go would be to get a firewall that let you throttle control port 25 to only a very small number since normal smtp traffic would be pretty light. It might help, but hacked is hacked."

**Mr. Tech** · 3rd May 2005, 09:56 AM

It doesn't look like a "well known area" but hopefully they shed some light on your problem.

J.K. · 3rd May 2005, 03:40 PM

Awwww yeaaaa..

Thanks, Tech. I'll try to Linda (who is the person I work with on these things) to take a look at what you've posted.

Cheers!