Seems this feature is risky for those who use an email client on a smartphone.  For those who have this turned up, do you see a lot of false positives?

Frank

i never knew this existed. how does it work if you turn it on? the documentation is non-existent:

 

g_safe_smtp - Force users to prove they are real if logging in from unknown sources via smtp

 

This feature is intended to prevent spamers/hackers from harvesting accounts on your system and then using them to send out spam

 

 

david camm

advanced web systems

keller, tx

 

On 7/23/2014 4:28 PM, Glenn Meadows wrote:

I think people new (and good) innate fear of randomly clicking links in email is part of the problem. If the country was listed in the message they got, it would actually be more helpful.

 

-- Glenn Meadows

Mayfield Mastering

2825 Erica Place

Nashville, TN 37204

615-383-3708

 

On 7/23/2014 4:17 PM, surgemail-support wrote:

The email contains a link which shows them a map of the world with the origin of the ip address on the map... isn't that clear? Or is that not working? Or are they afraid of pressing the link incase it's a trick?

(just trying to understand why the existing mechanism isn't working as intended before modifying it - I think your idea is good actually)

ChrisP.

 

Netwin,

Just making another feature suggestion. A common support call

topic is the

automated e-mail message from SurgeMail to a user when the

g_safe_smtp is

enabled. These are usually hacked accounts and SurgeMail is

blocking the

authenticated SMTP session from an unknown IP address. The problem

is that

the customer has no idea if the IP address included in the message

is their

IP address or some spammers IP address. As a result, they are

confused and

do not know if they should click the link included in the message. We

usually ask them for the IP address in the e-mail, perform a WHOIS

query,

and then ask if they are trying to access their mailbox from that

network/location. Today it was an IP address from the Ukraine.

My suggestion is that if g_country_ip is also enabled, which gives

SurgeMail

the country that owns the IP, include the country information in the

g_safe_smtp notice. I think that would eliminate a lot of the

confusion for

the end user.

Thanks,

Jim Lohiser

N2Net