[Mimedefang] OWA spam scripting attack

[WBrown at e1b.org]

Todd wrote on 10/23/2008 08:57:47 AM:

> Just wondering if anybody has any ideas at how to stop this from
happening?

Is there any chance of restricting where OWA can be accessed from?  Do you
have a VPN, so you can lock it down to only internal IP addresses, or at
least block access from countries known to cause problems?

Filtering the outbound mail is nice, but preventing the creation of the
message seems like a better approach.