Re: SMTP SECURITY: A new (?) idea

Article View: comp.security.misc

Article #261

Back to comp.security.misc Previous Next

#261

From: Dave
Date: Thu, 13 Aug 1992 14:22

20 lines
1569 bytes

In article <1992Aug13.121416.7078@csd.uch.gr> kanagn@athina.cc.uch.gr (Kostas Anagnostakis) writes:

     I had an idea I would like to share with you. Why not implement SMTP
     allowing only connections from PRIVILEGED ports. As far as I have gone
     into the matter, this would be a solution because a normal user is
     not able to use a socket port < 1000 so his attempt to connect to
     a SMTP server will fail.

Well, pretty much anyone nowdays can become "root" by buying
their own machine.  It all boils down to the question of "Can
you trust the remote machine to tell you the correct mail header?"
You can't...

--
===============================================================================
David J. Bianco 			Systems Dude & Part time Illusionist
Old Dominion University    			<bianco@cs.odu.edu>
Dept of Computer Science,		"BORGer King:  We do it our way.
Norfolk, VA 23529			 Your way is irrelevant..."
===============================================================================

Technical Details

Message-ID: <BIANCO.92Aug13092256@aelle.cs.odu.edu>

Path: arc1-ca.pugleaf.net!sparky!uunet!sun-barr!ames!daffodil!news.cs.odu.edu!bianco

References: <1992Aug13.121416.7078@csd.uch.gr>

Show Full Headers

Complete Article Headers

Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!sun-barr!ames!daffodil!news.cs.odu.edu!bianco
From: bianco@aelle.cs.odu.edu (Dave)
Subject: Re: SMTP SECURITY: A new (?) idea
In-Reply-To: kanagn@athina.cc.uch.gr's message of 13 Aug 92 12: 14:16 GMT
Message-ID: <BIANCO.92Aug13092256@aelle.cs.odu.edu>
Sender: news@cs.odu.edu (News File Owner)
Nntp-Posting-Host: aelle.cs.odu.edu
Organization: Old Dominion University, Norfolk, VA, USA
References: <1992Aug13.121416.7078@csd.uch.gr>
Date: Thu, 13 Aug 1992 14:22:56 GMT
Lines: 20

Reply to Parent Message