[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] E-mail Alias problems
- Subject: Re: [cobalt-users] E-mail Alias problems
- From: "Carrie Bartkowiak" <ravencarrie@xxxxxxxx>
- Date: Thu Mar 15 23:10:03 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
> The problem is that user xyz wants to receive e-mail from abc@xxxxxxxxxxxx
> So I have made an alias form xyz which is offcourse abc.
>
> This does not work. Mail sent to abc@xxxxxxxxxxx is received by
> abc@xxxxxxxxxxxx
Boy I wish y'all would use things like 'bob' and 'joe', but here goes:
Delete abc's account.
Make instead an account named something like domain1a.
Then give it an alias of abc.
Further users added to this account would be like so:
domain1b, domain1c, or even numerical... domain11, domain12, domain13
Delete xyz's account.
Make an account named something like domain2a.
Give it an alias of xyz and abc.
Remember that there can only be one USER on the box with a particular name.
So you don't want to be making USERS with names that are common, like:
sales
info
admin
abuse
support
webmaster
mike
joe
bob
etc., etc.
What you do, and this helps when trying to confuse hackers who like to use
the first part of an email address as half of a login/password combination,
is to make a USER with a strange, unique name. Like jsmith42. Then you give
jsmith42 an ALIAS of 'joe'. The client logs in with jsmith42 and his
password to get his mail.
A hacker comes along, sees the email addy of mailto:joe@xxxxxxxxxxx and
unsuccessfully tries to gain access to that account with 'joe' as the
username and a good guess at the password. He'll never get it, because there
is no user named 'joe' on the system.
Clear as mud?
Basic rule: don't make users with common names/titles and hand them out to
clients. Make them for your host domain so that no one else can take them,
and then take the time to explain to your clients why they can't make a user
named 'sales', but instead have to make a nice, hard-to-guess user and give
it an alias of 'sales'.
CarrieB