ZDNet UK


Skip to Main Content

ZDNet.co.uk - Winner of Best Business Website 2007
  1. Home
  2. News
  3. Blogs
  4. Reviews
  5. Jobs
  6. Resources
  7. Community
  8. My ZDNet

 

ZDNet UK RSS Feeds


Security threats Toolkit

Network administrators told to secure servers

Declan McCullagh CNET News.com

Published: 30 Jan 2004 15:05 GMT

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

The US government is emailing advice to network administrators: secure your servers.

Starting on Thursday, the Federal Trade Commission and its counterparts in 26 other nations began sending email to tens of thousands of people believed to be responsible for open relays and open proxies that spammers use as broadcast points for massive amounts of junk mail.

This represents an escalation of the FTC's efforts to close open relays, which began last May with notices to operators of more than 1,000 servers.

The new campaign is more ambitious, FTC attorney Don Blumenthal said. "We're doing this on a much larger scale. The one last year was aimed more at open relays. This is much broader. It's open proxies and open relays."

An open relay is a mail server configured so that anyone can use it as a relay point for mail to any recipient. Until the late 1990s, this was normal behaviour for mail servers. But after spammers began to abuse open relays, they began to be viewed as a problem. Open proxies are similar -- they're often misconfigured Web servers -- and can permit spam to be sent anonymously.

The FTC's "Secure Your Server" warning, sent via email, cautions that unless the recipient takes action, "your network connections may become clogged with traffic; your administrative costs may increase; or your Internet Service Provider may shut down your Internet service."

Servers identified in the campaign were collected from existing anti-spam blacklists such as the Open Relay Database and the Open Proxy Database. The notifications will be sent to owners of the range of Internet addresses that the open proxies or relays inhabit -- and not, typically, to end users.

On Wednesday, Blumenthal posted an alert on the popular spam-l discussion list saying the information campaign was about to begin. Some people who responded worried that the FTC's unsolicited bulk email resembled spam. "Sounds like a spam run," one person said.

"I think there are a lot of different definitions of spam out there," Blumenthal said in an interview on Thursday. "Certainly [the Can-Spam Act] focuses on commercial mail. We feel very strongly these are educational pieces. They will hopefully eventually cut back on spam."

Other nations participating in the campaign include the United Kingdom, Canada, Australia, Singapore, Japan, Switzerland and South Korea.

  • Email
  • Trackback
  • Clip Link
  • Print friendly
  • Post Comment

Did you find this article useful?
66 out of 140 people found this useful


Full Talkback thread

0 comments


Company/Topic Alerts

Create a new alert from the list below:



Sentry Posts Blog

Nasa and the virus

Yesterday the BBC ran a story about a computer virus making it into orbit, which I read with incredulity. OK, it's a nice silly season story on the surface, but what really got me was... More

3 comments

Customer data found on eBay server hig...

The recent news about customer details being retrieved from a server sold on eBay is yet another story about the sorry state of information security in the electronic age (see: http://news.zdnet.co.uk/...m).... More

Post a comment

Does it matter if you are an aardvark...

In spam terms, apparently it does. According to Cambridge University security expert Richard Clayton, if your email address is aardvark at animal.net, you are more likely to receive... More

5 comments