[SURBL-Discuss] Forge SURBL mail from gfi.com, just minutes ago.

David Vella david at gfi.com
Fri Apr 8 09:06:25 CEST 2005


Sorry for this.  I am the GFI MailEssentials/MailSecurity/MailArchiver
product manager and I am a list subscriber because I like the SURBL
concept.  The reason of these emails seems to be because yesterday our
network administrator installed a new email relay server (named
passthrough) and I believe that he has mis-configured it.  I sent him
all this info so that he will look into it.

I will make sure that this is fixed immediately.

David Vella - GFI Software Ltd. - www.gfi.com 
Messaging, Content Security & Network security software 
GFI: FAXmaker - LANguard - MailSecurity - DownloadSecurity 

-----Original Message-----
From: discuss-bounces at lists.surbl.org
[mailto:discuss-bounces at lists.surbl.org] On Behalf Of List Mail User
Sent: Friday, April 08, 2005 8:41 AM
To: discuss at lists.surbl.org; jeffc at surbl.org
Cc: track at plectere.com
Subject: Re: [SURBL-Discuss] Forge SURBL mail from gfi.com, just minutes

	Called and left a polite message on voice mail - not open until
tomorrow - Also, the US op. is a sales and tech support location only.
It seem almost certain, that they didn't forge your email - but they are
operating an open relay and using an illegal hostname for the HELO
argument; Good reasons to believe the product is likely fundamentally

	Hell, the relay uses the name "passthrough" - certainly looks to
be done on purpose.

	Maybe someone should LART zdnet using the gfi.com relay and
point out the equivalence to them that way:)

	Paul Shupak
	track at plectere.com
Discuss mailing list
Discuss at lists.surbl.org

This mail was checked for viruses by GFI MailSecurity. 
GFI also develops anti-spam software (GFI MailEssentials), a fax server (GFI FAXmaker), and network security and management software (GFI LANguard) - www.gfi.com 

More information about the Discuss mailing list