What I try to do is connect to the server on port 25 and go through this
process.
(1) HELO INTRUDER.COM
<The server responds>
(2) MAIL FROM:[EMAIL PROTECTED]
<The server responds>
(3)RCPT TO: [EMAIL PROTECTED]
<The server will give you an error if it will not accept relays. If it
accepts mail for a domain other than the domain it is servicing, then it is
open for a relay attack.>
If you want to continue your message then you can enter:
(4)DATA
<the server will tell you to enter data with only a "." on the last line>
(5)RSET
(6)QUIT
That is basically what I do. Does anyone else have anything to add?
Lance
----- Original Message -----
From: "Gary Rose" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, June 21, 2001 10:55 AM
Subject: Need to Lock Down Mail Relay
> What is the easiest way to test if a mail server has mail relay enabled
> other than pointing your email client at it? Can you telnet to port 25 and
> use SMTP commands? If so, what is the process?
>
>
> Thanks.
>
>
> -G
>
> _______________________________________________
> Firewalls mailing list
> [EMAIL PROTECTED]
> http://lists.gnac.net/mailman/listinfo/firewalls
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
