full-disclosure - denial of service on ISN list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <40ED1F4A.28016.D3B71E9@localhost>
From: stuart at cyberdelix.net (lsi)
Subject: denial of service on ISN list

I can't subscribe to ISN because their mail server thinks my mail 
server is a spammer.  I can report that Pipex are one of the largest 
ISPs in the UK, and that this server might be used by hundreds of 
thousands of people.

I put it to ISN that your system allows people to be kicked off the 
list.  All I need to do is fake some spam from my enemy's SMTP to the 
list, and you block the entire server.  When another of Pipex' 
100,000 subscribers attempts to join, they are blocked too.  Not 
good.

Stu

On 8 Jul 2004 at 1:59, Mail Delivery System wrote:

Date sent:      	Thu,  8 Jul 2004 01:59:26 +0100 (BST)
From:           	MAILER-DAEMON@...go.systems.pipex.net (Mail Delivery System)
Subject:        	Undelivered Mail Returned to Sender
To:             	stuart@...erdelix.net

> This is the Postfix program at host pengo.systems.pipex.net.
> 
> I'm sorry to have to inform you that the message returned
> below could not be delivered to one or more destinations.
> 
> For further assistance, please send mail to <postmaster>
> 
> If you do so, please include this problem report. You can
> delete your own text from the message returned below.
> 
> 			The Postfix program
> 
> <isn-request@...rition.org>: host forced.attrition.org[66.80.146.7] said: 553
>     5.3.0 - 780 spammer or relay pengo.systems.pipex.net ESMTP Postfix (in
>     reply to MAIL FROM command)
> 

---
Stuart Udall
stuart at@...erdelix.dot net - http://www.cyberdelix.net/

--- 
 * Origin: lsi: revolution through evolution (192.168.0.2)