Do not allow some ids to authenticate

[Jim Howell]

Hi,
	Thanks.  We do a lot of that already and I was just hoping I'd missed
something in the access DB possibilities.  I'm just looking at all
possible options.  Thanks.
Jim

-- 
Jim Howell
Cornell University
CIT Infrastructure, Unified Comm.
Msging Group, Lead Email Specialist
email: jwh2 at cornell.edu
Phone: 607-255-9369




On 10/22/13 9:35 AM, "Jose-Marcio Martins da Cruz"
<jose-marcio.martins at ensmp.fr> wrote:

>On 10/22/2013 03:11 PM, Jim Howell wrote:
>> Hi,
>> 	Thanks for the response.  One question however.  The "spammer at aol.com"
>> that is the envelope from, correct?  We offer an authenticated server
>>for
>> people to use to send email via a fat client such as Thunderbird.  The
>> problem I'm trying to solve is to refuse their connection when they
>> authenticate and not at the envelope from, aka earlier	in the SMTP
>> session.  We unfortunately have too many people with compromised
>> credentials using the service.  Thanks.
>
>Don't know about your domain, but this equality isn't usually valid, and
>you shouldn't reject
>messages just based on this.
>
>There are other ways to solve your problem. On of them is to do rate
>limits, based on connection
>rate/message rate or recipient rate, to avoid spam being sent. Take a
>look at :
>
>	http://www.j-chkmail.org/wiki/doku.php/doc/howto/outgoing_spam
>
>the idea is there, using our filter, but you can implement it with others
>if you prefer.
>
>To avoid accounts being compromised you can, e.g., reject outgoing
>messages (with credentials) being
>sent to some database of phishers reply adresses. Take a look at
>
>   http://groups.google.com/group/anti-phishing-email-reply-discuss/topics
>
>
>
>-- 
>
>  Envoyé de ma machine à écrire.
>  ---------------------------------------------------------------
>   Spam : Classement statistique de messages électroniques -
>          Une approche pragmatique
>   Chez Amazon.fr : http://amzn.to/LEscRu ou http://bit.ly/SpamJM
>  ---------------------------------------------------------------
>  Jose Marcio MARTINS DA CRUZ            http://www.j-chkmail.org
>  Ecole des Mines de Paris                   http://bit.ly/SpamJM
>  60, bd Saint Michel                      75272 - PARIS CEDEX 06
>  mailto:Jose-Marcio.Martins at mines-paristech.fr
>