Re: Trying to find a bug in sendmail_redirection.nasl

From: James Davis (jamesdat_private)
Date: Wed Sep 17 2003 - 06:15:29 PDT

  • Next message: Renaud Deraison: "Re: Trying to find a bug in sendmail_redirection.nasl"

    On Wed, 17 Sep 2003, Renaud Deraison wrote:
    
    > And show us the output you're getting.
    
    I tested that, here's the output
    
    220 smtpserver.network ESMTP Sendmail 8.11.6/8.11.6; Wed, 17 Sep 2003 13:33:41 +0100
    HELO jml.net
    250 smtpserver.network Hello [xxx.xxx.xxx.xxx], pleased to meet you
    MAIL FROM: root@localhost
    553 5.5.4 root@localhost... Real domain name required for sender address
    QUIT
    221 2.0.0 smtpserver.network closing connection
    Connection closed by foreign host.
    
    I think more likely you're looking for ouput like this though?
    
    220 smtpserver.network ESMTP Sendmail 8.11.6/8.11.6; Wed, 17 Sep 2003 14:01:06 +0100
    HELO jml.net
    250 smtpserver.network Hello [xxx.xxx.xxx.xxx], pleased to meet you
    MAIL FROM: rootat_private
    250 2.1.0 rootat_private Sender ok
    RCPT TO: root@testat_private
    550 5.7.1 root@testat_private Relaying denied. IP name lookup failed [xxx.xxx.xxx.xxx]
    
    I altered the code in sendmail_redirection.nasl to aid debugging to
    
     b = smtp_recv_banner(socket:soc);
      domain = ereg_replace(pattern:"[^\.]*\.(.*)",
                           string:get_host_name(),
                           replace:"\1");
      s = string("HELO ", domain, "\r\n");
      send(socket:soc, data:s);
      r0 = recv_line(socket:soc, length:1024);
      s = string("MAIL FROM: root@", get_host_name(), "\r\n");
      send(socket:soc, data:s);
      r1 = recv_line(socket:soc, length:1024);
      s = string("RCPT TO: root@host1@", get_host_name(), "\r\n");
      send(socket:soc, data:s);
      r2 = recv_line(socket:soc, length:255);
      if(ereg(pattern:"^250 .*", string:r2))security_warning(port: port, data:r0);
      close(soc);
    
    
    and by cycling the data through r0,r1 r2 I get
    
    r0: 220 smtpserver.network ESMTP Sendmail 8.11.6/8.11.6; Wed, 17 ;;p 2003 13:56:29 +0100
    r1: 250 smtpserver.network Hello [xxx.xxx.xxx.xxx], pleased to meet you
    r2: 250 2.1.0 root@domain... Sender ok
    
    Which I don't believe is right at all, r0 should be r1, r1 should be r2
    and r2 should be 550 5.7.1 root@testat_private Relaying denied. IP
    name lookup failed [xxx.xxx.xxx.xxx].
    
    James
    



    This archive was generated by hypermail 2b30 : Wed Sep 17 2003 - 06:16:31 PDT