Re: SMTP security program.

Article View: comp.mail.sendmail

Article #1

Back to comp.mail.sendmail Previous Next

From: Rudi van Houten
Date: Tue, 27 Oct 1992 08:32

24 lines
1666 bytes

In <1992Oct26.162126.10619@klaava.Helsinki.FI> viljanen@klaava.Helsinki.FI (Lea Viljanen) writes:

>Some time ago I saw somebody mention a program which essentially
>made forging mail a not-so-trivial operation. Or at least it
>logged telnets to SMTP port much better than syslog.

>Hints to the whereabouts of such a beast would be welcomed.

To log SMTP-connections you can install TCP-wrapper, available at many
ftp-sites (ftp.uu.net, mcsun.eu.net).  You must run sendmail then
(via tcpwrapper) under inetd, and not as a daemon (sendmail -bd).
Identical scheme is needed if you use another SMTP-daemon. With
tcpwrapper you can permit/forbid specified hosts a/o domains to make
connection. Very useful for commands as finger, rlogin and rwho. But
I don't see a use for SMTP. The wrapper doesn't interfere with SMTP
(the protocol) itself, so from every machine that can establish an
SMTP connection the forging of mail stays a possibility.
If you only use it to log all SMTP-connections I fear that you will
get flooded with log-messages.
-- 
Rudi van Houten	<rudi@cc.ruu.nl>
Academisch Computer Centrum Utrecht / Besturings Systemen
Budapestlaan 8  -  3584 CD  -  Utrecht  -  Netherlands
:-) Experience is the harvest of many mistakes.

Technical Details

Message-ID: <3275@accucx.cc.ruu.nl>

Path: arc1-ca.pugleaf.net!sparky!uunet!paladin.american.edu!news.univie.ac.at!hp4at!mcsun!sun4nl!ruuinf!accucx!acbhour

References: <1992Oct26.162126.10619@klaava.Helsinki.FI>

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!paladin.american.edu!news.univie.ac.at!hp4at!mcsun!sun4nl!ruuinf!accucx!acbhour
From: acbhour@accucx.cc.ruu.nl (Rudi van Houten)
Newsgroups: comp.mail.sendmail
Subject: Re: SMTP security program.
Message-ID: <3275@accucx.cc.ruu.nl>
Date: 27 Oct 92 08:32:20 GMT
References: <1992Oct26.162126.10619@klaava.Helsinki.FI>
Organization: Academic Computer Centre Utrecht
Lines: 24

Reply to Parent Message