Re: AnalogX Proxy SMTP server relay

From: Joe Stewart (jstewartat_private)
Date: Fri Oct 05 2001 - 23:57:21 PDT

Next message: Robbie Saunders: "AIM Exploits"

Previous message: Robert van der Meulen: "Re: Broken AOL Code - spoofing"
In reply to: Claymore: "AnalogX Proxy SMTP server relay"
Next in thread: Claymore: "AnalogX Proxy SMTP server relay"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Claymore wrote:
> 
> Increasing numbers of users who are using AnalogX Proxy SMTP servers are
> being reported for mail open relays, though when a standard relay check is
> used it comes back as not relaying.

Correct me if I am wrong, but it looks as though AnalogX only checks for a
user configured email alias in the "MAIL FROM:" header to determine if it 
will relay or not. So if I find a valid email alias, I can relay mail through 
your proxy to anyone. 

-Joe

-- 
Joe Stewart  Information Security Analyst 
         jstewartat_private 
-----------------------------------------
 "24x7 Enterprise Security Monitoring"
LURHQ Corporation  http://www.lurhq.com/

Next message: Robbie Saunders: "AIM Exploits"
Previous message: Robert van der Meulen: "Re: Broken AOL Code - spoofing"
In reply to: Claymore: "AnalogX Proxy SMTP server relay"
Next in thread: Claymore: "AnalogX Proxy SMTP server relay"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sat Oct 06 2001 - 09:37:05 PDT