Intercepting SMTP traffic...

[Frode Skarstein]

Hi!

I am running a small scale, yet viable, commercial webhosting service using SIMS for my customers' email needs. It works wonderfully.

However, I have currently been accused (wrongly, i must add...) of having tampered with the outgoing email of one of my clients. He claims that not only have I generated emails in his name, but I have also, and this is the impressive part, intercepted his outgoing emails, added certain sentences to them, and let them go off to wherever he was sending them.

I am aware that SIMS account system makes it possible for me as a sysadmin to view incoming email in the SIMS folder. And furthermore, I am aware that I, if I have any user's password (which i don't anymore...), can generate email in any accounts name. BUT as far as I know, unless i do some serious programming to go into SIMS' processing of emails etc, i can not *stop* emails that a client is sending, edit them, and then relay them on.

My question is: How much skill does it take for a system admin to intercept, edit and relay on emails from clients using the SIMS email product? I guess i don't really want to know exactly HOW to do it, just how feasible it is. We're talking real time here. I would have to have some kind of sniffer alerting me of when there was SMTP activity on his account, i would have to go in, view, edit, and then relay on to receiver.

This is a VERY VERY annoying situation for me, and I would really appreciate to get your input on this problem.

Sincerely,
Frode Skarstein


#############################################################
This message is sent to you because you are subscribed to
the mailing list <[EMAIL PROTECTED]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>