09-21-2001
It is not a just a matter of spoofing the sending IP. SMTP is based on TCP which is connection oriented. The exploit most commonly used is when one or more intermediate SMTP relays are used to relay the mail combined with dirty tricks in the SMTP protocol exchange.
I agree with PxT that there are not too many defensible scenarios to send anonymous email or mask the originating machine. The potential for abuse may far outweigh the benefit for good.
9 More Discussions You Might Find Interesting
1. Linux
say i have these many file in a directory named exam.
1)/exam/newfolder/link.txt.
2)/exam/newfolder1/
and i create a tar say exam.tar
well the problem is,
when i read the tar file i dont find any metadata about the directories,as you cannot create a tar containig empty directories.
on the... (2 Replies)
Discussion started by: Tanvirk
2 Replies
2. Shell Programming and Scripting
Dear all-
I have a requirement to send an email via email with body content which looks something below-
Email body contents
--------------------
RequestType: Update
DateAcctOpened: 1/5/2010
Note that header information and data content should be normal text..
Please advice on... (5 Replies)
Discussion started by: sureshg_sampat
5 Replies
3. Shell Programming and Scripting
Dear All-
My requirement is as below-
Header file
$ cat HEADER.txt
RequestId:
RequestDate:
Data file
$ cat DATAVAL.txt
1001|2009-03-01
I need to send the combined data below as email body via mailx command
------------------
RequestId:1001
RequestDate:2009-03-01
I would like... (4 Replies)
Discussion started by: sureshg_sampat
4 Replies
4. UNIX for Dummies Questions & Answers
How can i tweak sendmail configuration files so that the "Received:" field is removed from email header information?
Or else can i change Received: (from enswitch@localhost) in email header to something likeReceived: (from xyz@localhost)?
---------- Post updated at 09:57 PM ---------- Previous... (2 Replies)
Discussion started by: proactiveaditya
2 Replies
5. UNIX for Dummies Questions & Answers
Friends,
I need help with the following in UNIX.
Merge all csv files in one folder considering only 1 header row and ignoring header of all other files.
FYI - All files are in same format and contains same headers.
Thank you (4 Replies)
Discussion started by: Shiny_Roy
4 Replies
6. Shell Programming and Scripting
Hello There...
I have a sample input file ..
number:department:amount
125:Market:125.23
126:Hardware store:434.95
127:Video store:7.45
128:Book store:14.32
129:Gasolline:16.10
I will be doing some manipulations on all the records except the header, but the header should always be... (2 Replies)
Discussion started by: juzz4fun
2 Replies
7. Programming
Hi,
I need to somehow pipe the password to a command and run some SQL, for example, something like echo $password | sqlplus -s system @query01.sql
To make it not so obvious, I decided to try out writing a small C program that basically just do echo $password. So now I just do x9.out | sqlplus... (8 Replies)
Discussion started by: newbie_01
8 Replies
8. Shell Programming and Scripting
i have added the header also to the script you provided, it is working fine, but I am expecting to get the header over those rows for which the URL or port changes. URL will remain same for few rows and then it change, and once the URL change the header should come,
like in below input you can see... (11 Replies)
Discussion started by: mirwasim
11 Replies
9. Shell Programming and Scripting
I've been struggling with this one for quite a while and cannot seem to find a solution for this find/replace scenario. Perhaps I'm getting rusty.
I have a file that contains a number of metrics (exactly 3 fields per line) from a few appliances that are collected in parallel. To identify the... (3 Replies)
Discussion started by: verdepollo
3 Replies
LEARN ABOUT DEBIAN
auth-relaytest
auth-relaytest(1) General Commands Manual auth-relaytest(1)
NAME
auth-relaytest - attempt to use authenticated SMTP to relay to a DSBL-compliant host
SYNOPSIS
auth-relaytest [-tv] ntlm <ip address[:port]>
auth-relaytest [-tv] (cram-md5|login) <username> <password> <ip address[:port]>
DESCRIPTION
auth-relaytest attempts to connect to the specified <ip address> on the specified port (default is port 25) and tries to use the supplied
authentication data to relay mail through the host.
auth-relaytest uses the sender_user, sender_domain, target_user, target_domain, and auth-message parameters from dsbl.conf(5) by default.
If the auth-message parameter is not present, the message parameter is used instead.
In the first mode of operation shown, auth-relaytest attempts to authenticate using anonymous NTLM authentication. A well-known bug in cer-
tain Microsoft SMTP server implementations (described at http://www.microsoft.com/technet/security/bulletin/MS02-011.asp) will allow relay-
ing for any client that authenticates in this way.
In the second form of operation, auth-relaytest attempts to authenticate using either the cram-md5 or login variant of SMTP AUTH, using the
supplied username and password.
OPTIONS
-t Test mode. Instead of using the target_domain parameter from dsbl.conf(5), the test_target_domain parameter is used instead. This is
useful for sending a test message to yourself, perhaps to check that the server is actually relaying the messages.
-v Verbose mode. Details of the SMTP transaction are written to standard output.
AUTHORS
Paul Howarth <paul@city-fan.org>
Ian Gulliver <ian@penguinhosting.net>
SEE ALSO
dsbl.conf(5), spamtrap(1), relaytest(1)
2004-01-06 auth-relaytest(1)