Re: [cobalt-users] Port 25 email via telnet exploit

[Paul Jacobs <paul@xxxxxxxxxxxxxxxxxx>]

At 11:01 PM 6/3/2002, you wrote:
> Paul Jacobs wrote:
>
> > Telnet is turned off on my boxes, but you can still get to port 25 via
> > telnet... just like you can telnet to port 80 of any webserver.
> > It's a huge hole that not may know about..
>
> Let's not confuse things any more than they already are, Paul.  I'm
> willing to bet you I can telent into your Windows SMTP server exactly
> the same way from your DOS prompt.  It's normal behavior.  If you
> couldn't connect to port 80, you couldn't see websites.  If you couldn't
> connect to port 25, mail wouldn't work at all.

Not true.


> Sure things would be a lot more secure, but you might as well unplug
> your box.

Yes, let's unplug every computer and the will all be secure..... NOT, 
admin's need to know what the he&& they are doing that's all.


> > your only like of defense is how
> > the webserver or mail server respond to email or web connections.
> > Send mail has had this problem for some time...
>
> If mail didn't have this problem, then no one could ever send email.
> Connecting on port 25 is how mailservers talk to each other.

True, but some servers will auth. you before allowing you to post...... NO 
OPEN RELAY, send mail is the biggest open relay there is...
your welcome to connect to my work mail server at mail.adv-data.com and see 
if you can send mail from it.

> > Ohh, and for those that say "your I.P. is in the relay box" I say I have
> > sent mail from an I.P. I KNOW is not in the relay.
>
> Once you've logged in to the shell (whether dos or bash or csh, or any
> shell) you're a local user and you can send mail anywhere.

You miss understand... I am using eudora, to send mail, not logging in any 
other way than the eudora program....


> Jeff
> --
> Jeff Lasman <jblists@xxxxxxxxxxxxx>
> Linux and Cobalt/Sun/RaQ Consulting
> nobaloney.net
> P. O. Box 52672, Riverside, CA  92517
> voice: (909) 778-9980  *  fax: (702) 548-9484
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users

Paul Jacobs /Senior Network Eng.
Yourwebcentral.com
"Host ANY website "
http://www.yourwebcentral.com
mailto:paul@xxxxxxxxxxxxxxxxxx