Sadly, you've been suckered by the hype. Verio have not filtered on the content. They've filtered on the lack of authenticated access - that they've contractually prevented their users from being used as the source for the most common type of DDoS attack - spam. Godwin wants his friends to communicate through his mail relay? Fine, give them all accounts, and have them use POP-before-SMTP or SMTP-AUTH. Authenticate access to your systems - even the most basic authentication - or find that they may be used to attack others. [Note that Gilmore's relay was listed on at least one list whose criteria for listing includes that spam _was_ sent through the relay]

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/173/5041#5041