🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.security.misc
Article #272

Re: SMTP SECURITY: A new (?) idea

#272
From: Warner Losh
Date: Thu, 13 Aug 1992 16:51
25 lines
1479 bytes
In article <1992Aug13.121416.7078@csd.uch.gr> kanagn@athina.cc.uch.gr
(Kostas Anagnostakis) writes: 
>  I had an idea I would like to share with you. Why not implement SMTP
>  allowing only connections from PRIVILEGED ports. As far as I have gone
>  into the matter, this would be a solution because a normal user is
>  not able to use a socket port < 1000 so his attempt to connect to
>  a SMTP server will fail.

This has been done in many places already.  However, they can only do
it for local connections because they would bounce all the mail from
the rest of the world.

Besides, there is no such thing as a priviledged port in the RFC's.
It is something that Berkeley designed to help out security on a
network of BSD machines.  It has no meaning on a PC for example.  The
port numnbers are < 1024.

It would be better to run some sort of identity server (for a very
weak protection) or PEM (for a much stronger protection).

Warner
-- 
Warner Losh		imp@Solbourne.COM
imp@Solbourne.COM: "I should be OK, I'm basically doing the speed limit"
dworkin@rootgroup.com: "That's why BASIC is so slow.  It has a speed limit"
Technical Details
Message-ID: <BsxLI1.8xE@solbourne.com>
Path: arc1-ca.pugleaf.net!sparky!uunet!stan!imp
References: <1992Aug13.121416.7078@csd.uch.gr>

Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc
Path: arc1-ca.pugleaf.net!sparky!uunet!stan!imp
From: imp@solbourne.com (Warner Losh)
Subject: Re: SMTP SECURITY: A new (?) idea
Message-ID: <BsxLI1.8xE@solbourne.com>
Organization: Solbourne, User Interface Group
References: <1992Aug13.121416.7078@csd.uch.gr>
Date: Thu, 13 Aug 1992 16:51:36 GMT
Lines: 25