RE: [IMail Forum] Spam relayed through server aka HELP - ImailProblem/Dictionary Attack

[Len Conrad]

Can anyone tell me how to authenticate with Imail server?

here's byte-level logging from Eudora:

848 64:0.51 Rcvd: "220 X1 NT-ESMTP Server ms1.meiway.com (IMail 6.06 200930-1)\r\n"
848 32:0.51 Sent: "EHLO tx0-go2france-c.Go2France.com\r\n"
848 64:0.51 Rcvd: "250-ms1.meiway.com says hello\r\n"
848 64:0.51 Rcvd: "250-SIZE 0\r\n"
848 64:0.51 Rcvd: "250-8BITMIME\r\n"
848 64:0.51 Rcvd: "250-DSN\r\n"
848 64:0.51 Rcvd: "250-ETRN\r\n"
848 64:0.51 Rcvd: "250-AUTH LOGIN CRAM-MD5\r\n"
848 64:0.51 Rcvd: "250-AUTH=LOGIN\r\n"
848 64:0.51 Rcvd: "250 EXPN\r\n"
848 32:0.51 Sent: "AUTH CRAM-MD5\r\n"
848 64:0.51 Rcvd: "334 PDE0MTk2MTUwMjdAbXMxPg==\r\n"
848 32:0.51 Sent: "TENvbnJhZEBHbzJGcmFuY2UuJjNjU1ODk2OTA2OTEwNTk2NjA3\r\n"
848 64:0.52 Rcvd: "235 authenticated\r\n"
848 32:0.52 Sent: "RSET\r\n"
848 64:0.52 Rcvd: "250 ok its reset\r\n"
848 32:0.52 Sent: "MAIL FROM:<[EMAIL PROTECTED]>\r\n"
848 64:0.52 Rcvd: "250 ok\r\n"
848 32:0.52 Sent: "RCPT TO:<[EMAIL PROTECTED]>\r\n"
848 64:0.52 Rcvd: "250 ok its for <[EMAIL PROTECTED]>\r\n"
848 32:0.52 Sent: "DATA\r\n"
848 64:0.52 Rcvd: "354 ok, send it; end with <CRLF>.<CRLF>\r\n"
848 32:0.52 Sent: "Message-Id: <[EMAIL PROTECTED]>\r\n"
848 32:0.52 Sent: "X-Sender: [EMAIL PROTECTED]@mail.go2france.com\r\n"
848 32:0.52 Sent: "X-Mailer: QUALCOMM Windows Eudora Version 5.1.1\r\n"
848 32:0.52 Sent: "Date: Tue, 21 Jan 2003 02:14:51 -0600\r\n"
848 32:0.52 Sent: "To: [EMAIL PROTECTED]\r\n"
848 32:0.52 Sent: "From: Len Conrad <[EMAIL PROTECTED]>\r\n"
848 32:0.52 Sent: "Subject: test\r\n"
848 32:0.52 Sent: "Mime-Version: 1.0\r\n"
848 32:0.52 Sent: "Content-Type: text/plain; charset="us-ascii"; format=flowed\r\n"
848 32:0.52 Sent: "\r\n"
848 32:0.52 Sent: "test\r\n"
848 32:0.52 Sent: "\r\n"
848 32:0.52 Sent: ".\r\n"
848 64:0.53 Rcvd: "250 Message queued\r\n"
848 32:0.53 Sent: "QUIT\r\n"
848 64:0.53 Rcvd: "221 Goodbye\r\n"

 Is it through
telnet to port 25

You could do it that way, if you could do CRAM-MD5 keyed encryption.

Above, Eudora sends the "AUTH CRAM-MD5" command, and Imail sends back a key, which eudora uses to encrypt my username and password using the CRAM-MD5 algorithm. Imail gets my encrypted string back, and then uses the same key to decrypt my username and password. If my Eudora or Imail don't use the same key to encrypt/decrypt, the secret remains secret.

Len


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/