<br><br><div class="gmail_quote">2009/2/4 Scott Silva <span dir="ltr"><<a href="mailto:ssilva@sgvwater.com">ssilva@sgvwater.com</a>></span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
on 2-4-2009 7:21 AM Eduardo Casarero spake the following:<br>
<div><div></div><div class="Wj3C7c">> Hi, i've a rare scenario with one of my customers and i though that<br>
> someone from here could give me some fresh(?) ideas.<br>
><br>
> My client has it's own MTA (wich i don't manage, neither have access to<br>
> logs, etc) and it sends all outbound traffic to my server that has<br>
> (MScanner, SA, clamav, dcc, pyzor, razor, some custom rules, etc).<br>
><br>
> The problem i've right now is that (i assume) some malware stole valid<br>
> user/passwords to authenticate in the smtp server of my client, so tons<br>
> of spam are trying to get out to internet through my server.<br>
><br>
> Althogh all anti-spam stuff seems to work, i need some new<br>
> countermeasures to stop this at MailScanner stage (i cant do anything at<br>
> MTA level because everything comes from the same ip).<br>
><br>
> Any idea?<br>
><br>
> something like my own checksum repository, or url blacklist, or header<br>
> authentication matching, etc.<br>
><br>
> Any help would be appreciated.<br>
><br>
> Eduardo.<br>
><br>
</div></div>Sometimes you will have to play hardball with customers. They will balk at<br>
first, but if you offer your help to trackdown what is happening, even for<br>
free, you will both benefit from it. Because if you miss something, you will<br>
get blacklisted, not him.<br>
The customer will appreciate the free help, and either give you more business,<br>
or refer you yo his peers.<br>
<font color="#888888"></font></blockquote><div><br>God knows i've tried that way. but they just don't want it.<br> </div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<font color="#888888"><br>
<br>
<br>
--<br>
MailScanner is like deodorant...<br>
You hope everybody uses it, and<br>
you notice quickly if they don't!!!!<br>
<br>
</font><br>--<br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the website!<br>
<br></blockquote></div><br>