Re: IIS SMTP queue reader

From: Roger Seielstad (roger@wiredeuclid.COM)
Date: 08/01/02 

From: "Roger Seielstad" <roger@wiredeuclid.COM>
To: <rodtrent@yahoo.com>, "'Marco Teelen - Systemec BV'" <mteelen@systemec.nl>, <focus-ms@securityfocus.com>
Date: Wed, 31 Jul 2002 21:18:42 -0400

Could you back that up with some facts - URLs for instance?

Current patched versions are relay secure. 

--
Roger D. Seielstad
Email Geek

----- Original Message -----
From: "Rod Trent" <rodtrent@yahoo.com>
To: "'Marco Teelen - Systemec BV'" <mteelen@systemec.nl>;
<focus-ms@securityfocus.com>
Sent: Wednesday, July 31, 2002 4:05 PM
Subject: RE: IIS SMTP queue reader

> Be VERY careful with mail relay in IIS 5.0.  This is an exploit that is
> a common target.  Everything will be running fine, then you'll find out
> that someone has hijacked your SMTP and has been sending Spam to
> thousands of people.
>
> -----Original Message-----
> From: Marco Teelen - Systemec BV [mailto:mteelen@systemec.nl]
> Sent: Wednesday, July 31, 2002 7:17 AM
> To: focus-ms@securityfocus.com
> Subject: IIS SMTP queue reader
>
>
> Hello,
>
> I configured the SMTP service of IIS 5 as a mail relay server, so far
> without problems. IIS stores the queued mail in a directory under
> mailroot\queue. The disadvantage is that you only can check the number
> of mails in the queue but not which e-mails exactly, (from mail address
> and to mail address) like you can check in other mailservers (Sendmail).
>
> Is there a tool available that can do the same?
>
> Any info would be greatly appreciated.
>
>
> Kind regards,
>
>
> Marco Teelen
>