Exchange question

From: Tom Burns (tburns_at_torcausa.com)
Date: 11/14/03

  • Next message: Thor: "Re: Exchange question" 
    Date: Fri, 14 Nov 2003 08:56:11 -0500
To: <focus-ms@securityfocus.com>

    Thanks to everyone for the help on my SMTP issue.

    One thing that was brought up is that NDR's can be used to relay (the
    spammer uses NDR's to forward the message content by using the mail
    from: email@address.com) I think that we will be seeing more of this
    type of relaying going on- it sends a message back to the address in the
    from block.

    Anyone setup a double SMTP setup in there network? Ie. exchange only
    receives messages from the 2nd SMTP that is out on the net and the 2nd
    server relays the message internally from the outside?

    ---------------------------------------------------------------------------
    Network with over 10,000 of the brightest minds in information security
    at the largest, most highly-anticipated industry event of the year.
    Don't miss RSA Conference 2004! Choose from over 200 class sessions and
    see demos from more than 250 industry vendors. If your job touches
    security, you need to be here. Learn more or register at
    http://www.securityfocus.com/sponsor/RSA_focus-ms_031027
    and use priority code SF4.
    ---------------------------------------------------------------------------

  • Next message: Thor: "Re: Exchange question"

    Relevant Pages

    • Re: Nmap output
      ... most highly-anticipated industry event of the year. ... Choose from over 200 class sessions and ... Network with over 10,000 of the brightest minds in information security ...
      (Pen-Test)
    • RE: Large increase in port 27347
      ... Network Administrator ... Network with over 10,000 of the brightest minds in information security ... most highly-anticipated industry event of the year. ... and use priority code SF4. ...
      (Incidents)
    • RE: Nmap output
      ... Subject: Nmap output ... Network with over 10,000 of the brightest minds in information security ... most highly-anticipated industry event of the year. ...
      (Pen-Test)
    • RE: SQL Slammer doing the rounds again?
      ... our network spans the Northeast America. ... SQL Slammer doing the rounds again? ... Network with over 10,000 of the brightest minds in information security ... most highly-anticipated industry event of the year. ...
      (Incidents)
    • Re: SQL Slammer doing the rounds again?
      ... > Network with over 10,000 of the brightest minds in information security ... most highly-anticipated industry event of the year. ... > and use priority code SF4. ...
      (Incidents)