Sahil Tandon wrote:
Do all the emails ask users to reply to [EMAIL PROTECTED] I notice
you're using Postfix, so it's worth setting up a quick access map that
intercepts all messages to that address and redirects them to postmaster.
You'll then have to contact those users and ask them to change their
passwords immediately.
They rotate through the reply-to's. It's darn near impossible to stay
ahead of the game. Stronger passwords don't help as the users are giving
them out. ClamAV does help some in catching the messages coming in.
The worst part is my organization tries to make sure everything we send
out to our users is well edited. These messages are all horrible when it
comes to the content and grammar. You would think they should be able to
tell the difference.
Richard