SLUG Mailing List Archives
Re: [SLUG] Re: slug Digest, Vol 29, Issue 5
- To: slug@xxxxxxxxxxx
- Subject: Re: [SLUG] Re: slug Digest, Vol 29, Issue 5
- From: Daniel Pittman <daniel@xxxxxxxxxxxx>
- Date: Tue, 03 Jun 2008 13:21:43 +1000
- Organization: How about yours? http://rimspace.net/resume/
- User-agent: Gnus/5.110006 (No Gnus v0.6) Emacs/23.0.60 (gnu/linux)
> Quoting Daniel Pittman <daniel@xxxxxxxxxxxx>:
>> Which release of SME Server was this? Having done some auditing, and
>> worked with customers who ran SME Server systems for some years without
>> incident -- but only on older versions -- I am surprised at this claim.
> It is some years ago now...
> As I recall the older versions didn't seem to have the problem. I only
> found the problem with the 'last two' versions... whatever numbers
> they were.. sorry can't remember.
>> Do you have any supporting evidence for that? Alternately, did the
>> folks you know write this up anywhere?
> We weren't able to track down the exact process that was doing the
> sending... Every time you touched the mouse.. or keyed 'ps ax' the
> sending seemed to stop.
> When it was spamming, we got disconnection threats from our isp...
> I'm very certain that if one were to install it fresh from CD on a
> fresh machine it would start spamming again. The rogue code (I think)
> would still be there.
Well, I certainly never observed that, and would be surprised if there
had been rogue code along those lines in there -- even after the product
ended up mostly unmaintained in the hands of the community.