SunQuest
           Linux Help
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed ForumsOperating SystemsLinux Help

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
SlickEdit: Code in over 40 languages across 7 platforms. SlickEdit’s unmatched power, speed, and flexibility allows even the most accomplished developers to write better code faster. Download a free trial today!
  #1  
Old August 28th, 2002, 03:00 PM
LogicMan LogicMan is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2001
Posts: 194 LogicMan User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 6 h 40 m 55 sec
Reputation Power: 7
spoofing email

is there a wya to stop ppl from telneting and faking an email from port 25?
__________________
Web Development Studio | XML/ XSL/ PHP/ Flash/ Mysql | Digital Metamorphoses |
http://www.dimensionstudio.biz

Reply With Quote
  #2  
Old August 28th, 2002, 05:03 PM
freebsd freebsd is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2001
Posts: 5 freebsd User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
What is faking an email or spoofing email?

Reply With Quote
  #3  
Old August 28th, 2002, 06:15 PM
LogicMan LogicMan is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2001
Posts: 194 LogicMan User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 6 h 40 m 55 sec
Reputation Power: 7
using the smtp protocol...

mail from: xyz@aol.com
rcpt to: president@whitehouse.gov
data
this is the mail
.

.====================

Reply With Quote
  #4  
Old August 29th, 2002, 12:56 AM
freebsd freebsd is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2001
Posts: 5 freebsd User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Running an Open Relay smtp server is the correct term. To fix it simply do not allow relay to IPs you don't recognize as local and domain(s) you don't accept mails for.

Reply With Quote
  #5  
Old August 29th, 2002, 01:01 AM
LogicMan LogicMan is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Nov 2001
Posts: 194 LogicMan User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: 6 h 40 m 55 sec
Reputation Power: 7
but if we block ip's that are not local, then how do we get incoming mail?currently all our mail is comign thriu port 25 of the mail server!

Reply With Quote
  #6  
Old August 29th, 2002, 02:07 AM
freebsd freebsd is offline
Contributing User
Dev Shed Newbie (0 - 499 posts)
 
Join Date: Jan 2001
Posts: 5 freebsd User rank is Just a Lowly Private (1 - 20 Reputation Level) 
Time spent in forums: < 1 sec
Reputation Power: 0
Mail relaying is all about RCPT TO. Your SMTP server should still be wild open for everyone to connect, be it relaying to a remote host or deliverying messages your SMTP (being the MX for abc.com) accepts messages for.
When anyone RCPT TO 123@abc.com your SMTP should then accept it - THIS IS NOT Open Relay.
When someone with a src IP of 192.168.0.5 trying to RCPT TO 456@hotmail.com, your SMTP obviously is not the MX for hotmail.com, therefore, you should reject this. However, when selective relaying is properly configured, and whoever coming from 192.168.0.5 should be a trusted person, you can then configure your SMTP to allow it to deliver to any envelope recipient. Whatever envelope sender he uses make no difference.
Quote:
but if we block ip's that are not local, then how do we get incoming mail?

If your mail.abc.com is the MX for abc.com domain, you are supposed to ACCEPT anything@abc.com. That said, when someone uses a non-abc.com recipient address and his src IP is not known, you should reject relaying, not port 25 connection.

Reply With Quote
Reply

Viewing: Dev Shed ForumsOperating SystemsLinux Help > spoofing email


Thread Tools  Search this Thread 
Search this Thread:

Advanced Search
Display Modes  Rate This Thread 
Rate This Thread:


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
View Your Warnings | New Posts | Latest News | Latest Threads | Shoutbox
Forum Jump


Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
  
 





© 2003-2008 by Developer Shed. All rights reserved. DS Cluster 4 hosted by Hostway