On Thursday, March 11, 2004, 09:26:29, [EMAIL PROTECTED] wrote:
> Unless I'm missing something.  What I think the complaint is, is that simply
> putting his server's SMTP address into outlook and either an existing e-mail
> address or alias and he is able to send an e-mail to everyone on his domain.

The  "From:" address is irrelevant. Its an e-mail being *delivered* to a
mailbox on that server.

> So a former employee could use his address book, his old SMTP settings and
> an existing e-mail address and spam all of the current employees - without
> having to authenticate.  

Absolutely.

> I think I have seen this when people set up their outlook without checking
> "my server requires authentication".  They are able to send e-mail to
> everyone in my domain and they only find out something is wrong when they
> try to send mail to someone outside of the domain and they then get the "550
> not a gateway" error.

Exactly, its the difference between final delivery and relaying.

-- 
[EMAIL PROTECTED]     "The avalanche has already started, it is too
Rod Dorman              late for the pebbles to vote." � Ambassador Kosh


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to