Knowledgebase

Spam Sent through Glype or Other web Proxy??

Posted by midwestmerchant, 04-03-2011, 04:58 AM
Hey everyone..Hopefully there are some other system administrators out there who are familiar with hosting web proxy scripts such as Glype, PHProxy..etc. We currently host some of these and have began to notice an issue with spam being sent from our IP making outbound connections to a webmail server (either port 80 or 443) This has me thinking someone who has a proxy hosted with us may not know their site is actually being used to send out spam. I am thinking that someone is going to a Glype proxy site hosted on our server, connecting to a webmail client via the web proxy, and then sending out spam (tracing it back to the IP of the web proxy..or our server!) Does this sound like I could be correct here? Has anyone ran into this problem in the past? What is the best way to fix it and prevent people from going to a web proxy, connecting a webmail, and then sending out spam??

Posted by Patrick, 04-04-2011, 08:48 PM
It's possible. The solution, don't offer open proxies. You're inviting all kinds of trouble... I know that's not a valid answer, but it's the truth.

Posted by funkywizard, 04-05-2011, 05:31 AM
Yeah, this is a pretty common problem for web proxies. It's probably beyond the scope of your support to help customers with that sort of issue, but typically blocking some lesser used webmails are the solution. Blocking the big / dsl webmails is a must, as very few legitimate proxy users visit those, and they're a haven for spammers using hacked accounts. Second on the list is squirrelmail. I have a filter in my web proxy that detects squirrelmail, and disables sending emails via that if the user isn't in a first world country. Letting people access the big webmails, yahoo mail and gmail, is typically not a problem. The spammers tend not to use those anyway, even via proxy. The above steps have reduced my spam complaints to almost none, even though my proxies are extremely popular.



Was this answer helpful?

Add to Favourites Add to Favourites

Print this Article Print this Article

Also Read
servage.net down? (Views: 624)
theplanet/servermatrix (Views: 612)


Language:

Client Login

Email

Password

Remember Me

Search