Vulnerable Servers Warned
FTC seeks to secure more than a million servers that can be spoofed by spammers.
Grant Gross,
IDG News Service

WASHINGTON, D.C. -- The Federal Trade Commission has identified more than 1 million IP addresses that provide open proxies or open relays, which spammers can tap to hide their identities, and is alerting server owners that they might be inadvertently helping spam.

The FTC and 36 other government agencies from 26 countries have launched Operation Secure Your Server. The effort calls for the agencies to send e-mail to owners of tens of thousands of servers, asking them to check their server configurations for possible open relays or open proxies. Operation Secure Your Server will direct the owners to information on how to inexpensively check servers and close the openings.

We're certain that a lot of people we're going to contact are not aware of the problem, says Don Blumenthal, coordinator of the FTC Internet Lab. It's a significant problem.


Wrong Address
An open proxy or relay is one way a spammer can co-opt another server address when sending unsolicited e-mail. Sometimes a bulk mailer just provides a false return address as part of the mass mailing.

Identifying and taking advantage of open relays is also a favorite tactic of some viruses and worms. Some people suspected that last summer's Sobig virus was dispatched by purveyors of bulk e-mail.

The FTC e-mail sent to server owners will direct them to Secure Your Server, which tells how businesses can fix vulnerabilities. The FTC's Web site provides more information on closing holes. The FTC will send the e-mail for at least a couple of weeks, Blumenthal says.

The message, being sent in 21 languages to server operators around the world, explains that open relays and open proxies are servers that allow any computer in the world to bounce or route e-mail through them to other Internet mail addresses. Open relays and open proxies are often exploited by people who flood the Internet with spam. This abuse creates problems for consumers worldwide, as well as for law enforcement and your organization..............................................
More at PCWorld