Printable View
I was playing on MailStart.com this afternoon and found out they allow you to Spoof your sending name. However, it does put your IP address in the header. So, this shows you how easy it is for someone to spoof your account and have you get blamed for it.
(this is meant to make people aware, and inform them of how this happens and how easy it is.) If this can be taken in the wrong context please PM me ASAP and I'll take it down!
Don't worry about it or let it keep you from posting. All knowledge IS taken in the wrong context at one time or another. All you can do is trust that the people you share your knowledge with with use it responsibly. That's the nature of the beast... :lildevil:Quote:
Originally posted here by Info Tech Geek
(this is meant to make people aware, and inform them of how this happens and how easy it is.) If this can be taken in the wrong context please PM me ASAP and I'll take it down!
I think there are several other sites out there that allow you to do this too. You can even do it from your own mail server... They can also find an unprotected mail server to use as their relay... Spammers have proven time and time again.Quote:
I was playing on MailStart.com this afternoon and found out they allow you to Spoof your sending name.
Well, if they use a public access point or a proxy... then it will be that much harder (not impossible) to track down. Chain the proxy... and you've made it almost impossible. Especially if you are going through several countries.Quote:
However, it does put your IP address in the header
The same applies to ALL my posts.Quote:
(this is meant to make people aware, and inform them of how this happens and how easy it is.)
That is why this site is here... hackers know the weakness in your systems... shouldn't you?
actually if you pay attention to RFC 821 or the Simple Mail Transport Protocol Technical reference. You could easily forge an e-mail to or from anyone you want. But i believe that the server's capture your hostname and ip address and include that information into the headers of the e-mail...
when you get a chance sometime try this..
telnet your.isp.smtp.server 25
helo your.isp.smtp.server
mail from: [email protected]
rcpt to: [email protected]
data
date: 25 dec 2003 00:00:00
from: God!!
subject: This may be a little late but...
to: [email protected]
yourusername,
It's I know it's a little late to tell you but I just had a child. Be happy for me.
God
.
That last . (period) is necessary to send the msg, everything after data will be included into the e-mail until it reads a . (period) on a line by itself followed by a <crlf> (enter/return key)...
congrats, you just had god send you a notice of his son's birth... if you believe that is.. all assuming that you used the correct values in place of my fake info up there...
btw, I don't mean to offend anyone, this was just the first thing that came to mind as i typed this.. If I did offend, please forgive me.
hey tell me some sites that do that
i dont find any normally they say relaying not allowed
hey tell me some sites that do that
i dont find any normally they say relaying not allowed
As has been said already you dont need to use someone elses sever either use/install the one that comes with your computers os, (win2k(pro) and up or linux) or get on off the internet. set up your phony account in outlook exp. using the server name "localhost" in your pop and smtp settings (noteyou cant receive pop unless you have a pop server). but if you must use someone elses check the headers of the spam you get their all not relayed but many are.
As has been said already you dont need to use someone elses sever either use/install the one that comes with your computers os, (win2k(pro) and up or linux) or get on off the internet. set up your phony account in outlook exp. using the server name "localhost" in your pop and smtp settings (noteyou cant receive pop unless you have a pop server). but if you must use someone elses check the headers of the spam you get their all not relayed but many are.
admins turn off relaying so that people can't offload their outbox full of spam onto their servers. They do it to keep their systems from getting overloaded with garbage, and stop people from forging mail from their network to other people. Usually open relay's end up in the blackhole lists which would mean that nobody would accept mail from that server after it hits that list. Meaning that that person/company would no longer be able to host their own smtp server...
so, don't go looking, and if you do and find somthing, let that company know that it's open so they can fix it.
admins turn off relaying so that people can't offload their outbox full of spam onto their servers. They do it to keep their systems from getting overloaded with garbage, and stop people from forging mail from their network to other people. Usually open relay's end up in the blackhole lists which would mean that nobody would accept mail from that server after it hits that list. Meaning that that person/company would no longer be able to host their own smtp server...
so, don't go looking, and if you do and find somthing, let that company know that it's open so they can fix it.
hmmm relays and header forging........ it's actually stated in the same set of RFC's pertainting to SMTP transfer that in order for an smtp messaging system to meet standards it MUST have the capability of keeping the original headers intact. Without getting into too much detail about spiffy proxy chaining, relay hopping, and masquerading theres other means for the good mail server admin to change these headers. The best way to falsify such headers would be via a set of address rewrite rules using M4 and sendmail. To my knowledge there arent too many other smtp servers out there that have that level of control/editing so easily accessed....
course... if anyones ever looked at sendmails M4 macro's... easily accessed is a relative term.... The macro's are quite powerful but cryptic in the least... and many of the techniques used in advanced troubleshooting are the same techniques that can be used for spiffy relay hop / header forge tricks....
Of course, to the good mail admin, M4 is a godsend in it's versatility of performing nearly any task one could dream of on an smtp envelope
hmmm relays and header forging........ it's actually stated in the same set of RFC's pertainting to SMTP transfer that in order for an smtp messaging system to meet standards it MUST have the capability of keeping the original headers intact. Without getting into too much detail about spiffy proxy chaining, relay hopping, and masquerading theres other means for the good mail server admin to change these headers. The best way to falsify such headers would be via a set of address rewrite rules using M4 and sendmail. To my knowledge there arent too many other smtp servers out there that have that level of control/editing so easily accessed....
course... if anyones ever looked at sendmails M4 macro's... easily accessed is a relative term.... The macro's are quite powerful but cryptic in the least... and many of the techniques used in advanced troubleshooting are the same techniques that can be used for spiffy relay hop / header forge tricks....
Of course, to the good mail admin, M4 is a godsend in it's versatility of performing nearly any task one could dream of on an smtp envelope