smtp 25 telnet access

if you telnet prot 25 on www.eqube.ca, you can use RCPT MAIL to forge some emails.

just wonder if this is a potiential risk or might be used by Spam?

If so, how can I stop/block it?

Thanks ahead of time, 1st time to post.

Yes this is used by spammers.


You can change the relay flag to prevent this, and other ways depending on network configuration.

Worse, if your host makes it to a spammer known relay list, you will end up on various spam black lists and your domain will not be able to send e-mail to domains who use blacklists to cut down on spam. Many, many places use these lists btw.

--TH13

Thanks, I made sure it's not open relay.

I use InterScan VirusWall NT and could not find some decumentation about it, but I will sepnd some time to make it secure.

IS any good book or site on this topic? Thanks again.

I'm not going to test it sufficiently to show you an active account of mine...

But the response to a:-

rcpt to: [email protected]

receives a:-

250 recipient ok

You have an open relay or a honeypot...

If you don't have a honeypot.... well... you decide...

SamSpade:

03/31/06 22:40:31 SMTP Relay Check @ eqube.ca
Contacting 68.146.204.228
Failed to establish connection

and

NC:
eqube.ca [68.146.204.228] 25 (smtp): TIMEDOUT
sent 0, rcvd 0: NOTSOCK

what's up with that? i guess that's one way to solve your problem!

Hmmm.. as of 30 seconds ago....

Quote:

---

220 sgc-cal-002 InterScan VirusWall NT ESMTP 3.55 (build 1016) ready at Fri, 31
Mar 2006 20:47:57 -0700

---

i just tried again...same thing! maybe his cable co dont like mine?

That’s really funny ...

I scanned it, got

Quote:

---

220 sgc-cal-002 In Scan VirusWall NT ESMTP 3.55 ( build 1016) ready at Sat, 01 Apr 2006 XX:XX:XX -XXXX

---

When I used a command prompt;

telnet 68.146.204.228 25 it opened a session.


Something is rotten in Denmark ( is that where his local time says he is? )

Quote:

---

Originally posted here by Tedob1
i just tried again...same thing! maybe his cable co dont like mine?

---

Are you sure your ISP doesn't block outgoing port 25 except to its own SMTP relays?
I know I got bit quite a few times when trying to diagnose other servers and forgot that my ISP filters out outbound 25...


Ammo