Re: Exchange SMTP Hole?
From: Thor (thor_at_hammerofgod.com)
Date: 11/12/03
- Previous message: Jim Harrison (ISA): "RE: FTP server security."
- In reply to: Tom Burns: "RE: Exchange SMTP Hole?"
- Next in thread: Sean Warnock: "RE: Exchange SMTP Hole?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: "Tom Burns" <tburns@torcausa.com>, <focus-ms@securityfocus.com> Date: Wed, 12 Nov 2003 08:25:51 -0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Another place to check is the configuration of an Internet Connector,
if you are using one (as opposed to direct SMTP virtual server
connections.)
There is an "SMTP Address Space" area, which by default includes a
"*" address space. If you select "Allow mail to be relayed to these
domains" in the connector configuration, you also will allow
relaying. Someone may have monkey'ed with that setting....
T
- ----- Original Message -----
From: "Tom Burns" <tburns@torcausa.com>
To: <focus-ms@securityfocus.com>
Sent: Tuesday, November 11, 2003 8:16 AM
Subject: RE: Exchange SMTP Hole?
Exchange 2000 SP3 + rollup 3a.
Compaq dual teamed NIC.
Oh, about 10,000 messages to various domains created in about 4
hours.
(we would be lucky to send 10,000 messages in 1 year)
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0
iQA/AwUBP7Je9IhsmyD15h5gEQKIUwCg7tqIfsRzN4irtYc3ZcKqG9+fg0UAniL1
qaolsDNU6slHFic9OrG9LBD7
=hgLl
-----END PGP SIGNATURE-----
---------------------------------------------------------------------------
Network with over 10,000 of the brightest minds in information security
at the largest, most highly-anticipated industry event of the year.
Don't miss RSA Conference 2004! Choose from over 200 class sessions and
see demos from more than 250 industry vendors. If your job touches
security, you need to be here. Learn more or register at
http://www.securityfocus.com/sponsor/RSA_focus-ms_031027
and use priority code SF4.
---------------------------------------------------------------------------
- Previous message: Jim Harrison (ISA): "RE: FTP server security."
- In reply to: Tom Burns: "RE: Exchange SMTP Hole?"
- Next in thread: Sean Warnock: "RE: Exchange SMTP Hole?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|