[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] SMTP hole maybe - any ideas



On Wed Jun 04, 2003 - 01:10:08PM, Ian wrote:

> Your points are not lost on me and I am grateful for the input, and yes it
> has been a long day already and maybe I am missing something very obvious
> in what you are saying and the workings of SMTP, so please bare with me
> just a tick :)

Uhm... there is something missing or the mails are overlapping... 
You're right - it's too late already.

> from what I have experienced, this means that I could surely in effect
> find someone elses raq3, locate domains on it and send emails through its
> smtp server to other domains on that server, when I have nothing what so
> ever to do with it. 

Yepp, that's how smtp servers work.

> Thus I could in effect say to the people I email within that server, that
> I am there hosting supplier (if there domain and email is run from that
> server) and say "You are the worst customer we have had and want you to go
> away" hehehe

yes, you could. But I wouldn't do it unless you may change the logfiles on
the server as well... ;)

There is a reason why so many services tell their customers they'll never
ask for credit card data or passwords by mail. Trouble is, some customers
aren't very thoughtfull (send a mail with gibberish in the body and set the
subject to "virus warning" - it'll get distributed anyway).

> The only thing that will be traceable is the method with which they
> connect to the internet, ie there dynamic IP address.

Yes - and the ISP can provide you with the user data (but in germany you
have to go to the police to get them because they are only provided to law
enforcement organisations to secure personal data - maybe it's similar in
the UK)

> If I am getting this so so wrong then please forgive me and excuse my
> tired tired head....

go to bed, sleep well and when you're in germany send a mail - you'll get a
beer for all the trouble I've caused.

> I need more coffee obviously :)

I thought you drink tea in GB?

MfG
Andreas Banze

--
There are two means of refuge from the miseries of life: music and cats.
					-- Albert Schweitzer