smtp 25 telnet access
Page 1 of 2 12 LastLast
Results 1 to 10 of 14

Thread: smtp 25 telnet access

  1. #1
    Junior Member
    Join Date
    Mar 2006
    Posts
    12

    smtp 25 telnet access

    if you telnet prot 25 on www.eqube.ca, you can use RCPT MAIL to forge some emails.

    just wonder if this is a potiential risk or might be used by Spam?

    If so, how can I stop/block it?

    Thanks ahead of time, 1st time to post.

  2. #2
    Yes this is used by spammers.


    You can change the relay flag to prevent this, and other ways depending on network configuration.

  3. #3
    Master-Jedi-Pimps0r & Moderator thehorse13's Avatar
    Join Date
    Dec 2002
    Location
    Washington D.C. area
    Posts
    2,883
    Worse, if your host makes it to a spammer known relay list, you will end up on various spam black lists and your domain will not be able to send e-mail to domains who use blacklists to cut down on spam. Many, many places use these lists btw.

    --TH13
    Our scars have the power to remind us that our past was real. -- Hannibal Lecter.
    Talent is God given. Be humble. Fame is man-given. Be grateful. Conceit is self-given. Be careful. -- John Wooden

  4. #4
    Junior Member
    Join Date
    Mar 2006
    Posts
    12
    Thanks, I made sure it's not open relay.

    I use InterScan VirusWall NT and could not find some decumentation about it, but I will sepnd some time to make it secure.

    IS any good book or site on this topic? Thanks again.

  5. #5
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    I'm not going to test it sufficiently to show you an active account of mine...

    But the response to a:-

    rcpt to: noone@where.com

    receives a:-

    250 recipient ok

    You have an open relay or a honeypot...

    If you don't have a honeypot.... well... you decide...
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  6. #6
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,786
    SamSpade:

    03/31/06 22:40:31 SMTP Relay Check @ eqube.ca
    Contacting 68.146.204.228
    Failed to establish connection

    and

    NC:
    eqube.ca [68.146.204.228] 25 (smtp): TIMEDOUT
    sent 0, rcvd 0: NOTSOCK

    what's up with that? i guess that's one way to solve your problem!
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

  7. #7
    AO Ancient: Team Leader
    Join Date
    Oct 2002
    Posts
    5,197
    Hmmm.. as of 30 seconds ago....

    220 sgc-cal-002 InterScan VirusWall NT ESMTP 3.55 (build 1016) ready at Fri, 31
    Mar 2006 20:47:57 -0700
    Don\'t SYN us.... We\'ll SYN you.....
    \"A nation that draws too broad a difference between its scholars and its warriors will have its thinking done by cowards, and its fighting done by fools.\" - Thucydides

  8. #8
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,786
    i just tried again...same thing! maybe his cable co dont like mine?
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

  9. #9
    Senior Member IKnowNot's Avatar
    Join Date
    Jan 2003
    Posts
    792
    That’s really funny ...

    I scanned it, got
    220 sgc-cal-002 In Scan VirusWall NT ESMTP 3.55 ( build 1016) ready at Sat, 01 Apr 2006 XX:XX:XX -XXXX
    When I used a command prompt;

    telnet 68.146.204.228 25 it opened a session.


    Something is rotten in Denmark ( is that where his local time says he is? )
    " And maddest of all, to see life as it is and not as it should be" --Miguel Cervantes

  10. #10
    Senior Member
    Join Date
    Sep 2001
    Posts
    1,027
    Originally posted here by Tedob1
    i just tried again...same thing! maybe his cable co dont like mine?

    Are you sure your ISP doesn't block outgoing port 25 except to its own SMTP relays?
    I know I got bit quite a few times when trying to diagnose other servers and forgot that my ISP filters out outbound 25...


    Ammo
    Credit travels up, blame travels down -- The Boss

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides