[Tickets #5022] Re: Ability to sending email without login, spamming

[bugs at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=5022
-----------------------------------------------------------------------
 Ticket             | 5022
 Updated By         | fred at sundancer.us
 Summary            | Ability to sending email without login, spamming
 Queue              | IMP
 Version            | 3.2.8
 Type               | Bug
 State              | Not A Bug
 Priority           | 1. Low
 Owners             | 
-----------------------------------------------------------------------


fred at sundancer.us (2007-03-08 11:53) wrote:

> And what makes you think this happens without being logged in? Beside 
> that, you are using an ancient, unmaintained version.

Hi,  this started happening at a local ISP in Grants Pass Oregon. We using
IMP as our webmail server, and we are getting
one login every minute or so, with 31 character login id's like:
20070308123837.1rzybom81m4ow8so (each login is different, but all are 31
characters long).  I have had to clean out 1000's of spam messages from
the postfix system.

We are currently running Debian 1:3.3.5-13 with horde3 that came with the
install