Article View: comp.security.misc
Article #272Re: SMTP SECURITY: A new (?) idea
From: Warner Losh
Date: Thu, 13 Aug 1992 16:51
Date: Thu, 13 Aug 1992 16:51
25 lines
1479 bytes
1479 bytes
In article <1992Aug13.121416.7078@csd.uch.gr> kanagn@athina.cc.uch.gr (Kostas Anagnostakis) writes: > I had an idea I would like to share with you. Why not implement SMTP > allowing only connections from PRIVILEGED ports. As far as I have gone > into the matter, this would be a solution because a normal user is > not able to use a socket port < 1000 so his attempt to connect to > a SMTP server will fail. This has been done in many places already. However, they can only do it for local connections because they would bounce all the mail from the rest of the world. Besides, there is no such thing as a priviledged port in the RFC's. It is something that Berkeley designed to help out security on a network of BSD machines. It has no meaning on a PC for example. The port numnbers are < 1024. It would be better to run some sort of identity server (for a very weak protection) or PEM (for a much stronger protection). Warner -- Warner Losh imp@Solbourne.COM imp@Solbourne.COM: "I should be OK, I'm basically doing the speed limit" dworkin@rootgroup.com: "That's why BASIC is so slow. It has a speed limit"
Technical Details
Message-ID:
<BsxLI1.8xE@solbourne.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!stan!impReferences:
<1992Aug13.121416.7078@csd.uch.gr>Show Full Headers
Complete Article Headers
Newsgroups: comp.security.misc Path: arc1-ca.pugleaf.net!sparky!uunet!stan!imp From: imp@solbourne.com (Warner Losh) Subject: Re: SMTP SECURITY: A new (?) idea Message-ID: <BsxLI1.8xE@solbourne.com> Organization: Solbourne, User Interface Group References: <1992Aug13.121416.7078@csd.uch.gr> Date: Thu, 13 Aug 1992 16:51:36 GMT Lines: 25