New mail blocks result of Ralsky's latest attacks?

Mike Tancsa mike at sentex.net
Fri Oct 10 15:17:29 UTC 2003



Cant speak for others, but the server that was blocked for us by Yahoo! is 
ACL'd by IP address.  It would be very helpful if the Yahoo! folk could 
post an official explanation as to what happened so we can pass it on to 
our customers. e.g. a URL somewhere on Yahoo! ?

         ---Mike

At 10:59 AM 10/10/2003, Bob German wrote:
>A colleague informed me this morning that Alan Ralsky is doing widespread 
>bruteforce attacks on SMTP AUTH, and they are succeeding, mainly because 
>it's quick, painless (for him), and servers and IDS signatures don't 
>generally offer protection against them.
>
>Could this be why everyone's locking up their mail servers all of a sudden?
>
>Does anyone know of a way to stop them?
>
>Bob




More information about the NANOG mailing list