[imp] IMP Abuse (was Howto remove client IP-Address)

[Liam Hoekenga]

> Im curious as to how they are able to do this?  What kind of  
> authentication backend to you have configured?  How are spammers able  
> to use your install for spam if they dont have a user account to do so?
>   

The transfer logs on our campus SSO and webmail servers, and the Horde 
preferences database show that they're using compromised accounts.  Real 
user accounts.  How the accounts are getting compromised and those 
passwords in the hands of international spammers is another questions.

Liam