On 12/11/12 08:19, Frank Bonnet wrote:
Hello
a user ( student ) has his preferences modified without he does anything ... ( he said )
the replay-to field has been modified. the address recruitment@marutisuzukijobs.com was inserted in that field
The student is SURE he did not do that,
anyone has heard about the same problem ?
Check the out-going mail logs, that is standard practice for spammers after gaining access to an email account. I'm willing to bet his password has been compromised and spammers have been sending mail from his account with a reply-to of their choosing.
One of several reasons why I hide the reply-to field from my users. There are very few reasons for an average user to reset their reply-to address.
-- Arne Berglund System Administrator, Internet Services Lane Education Service District Eugene, OR ____________