[Mimedefang] Greylist-busting ratware?

[Joseph Brennan]

--On Friday, April 21, 2006 9:30 -0400 "nathan r. hruby" <nhruby at uga.edu> 
wrote:

>>> - Inbound ratware using SMTP AUTH to authenticate as a real user
>>
>> Hm.  We haven't seen this at all yet.  That's not a good sign.
>
> Yeah.  We were *thrilled* to see this happening.  *Thrilled* I tell you.


Would you send more detail about this?  Do you think it ran a client
using stored configuration in that client?  If not, they had to know
a username, password, and smtp server name to do it.

Joseph Brennan
Columbia University Information Technology