telnetting to port 25

Thread View: net.mail.headers

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Rick Lindsley Tue, 30 Sep 1986 16:43

#697

Author: Rick Lindsley
Date: Tue, 30 Sep 1986 16:43

22 lines
1592 bytes

Has anybody thought of a good solution to this problem? One that I once
implemented was to make smtp use a root port to send mail. Then if I
telnet to 25, then, I can chat with a help command, or maybe vrfy an
address, but as soon as I do mail from: I'll get an error.

In our particular case, we had mixed mailers (not all used root ports)
so I couldn't just refuse the message. What I did, though, was tack on
a line:

Comments: Message received over unauthenticated port.

Unfortunately, the users howled that this *looked* bad, and made our
company *look* bad. Apparently they'd rather have the hole present then
"look bad", so when we converted to sendmail the "feature" of
being able to telnet a forged message returned.

Does anybody else see this as a solution, or if not a solution then
perhaps a step towards one? I also think verification of a sitename on
a helo command would be nice, to catch obvious liars. (Yes I once
implemented that too, and caught flak for that too!)

Rick

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads