Vulnerability Development mailing list archives
Re: AnalogX Proxy SMTP server relay
From: Joe Stewart <jstewart () lurhq com>
Date: Sat, 06 Oct 2001 02:57:21 -0400
Claymore wrote:
Increasing numbers of users who are using AnalogX Proxy SMTP servers are being reported for mail open relays, though when a standard relay check is used it comes back as not relaying.
Correct me if I am wrong, but it looks as though AnalogX only checks for a user configured email alias in the "MAIL FROM:" header to determine if it will relay or not. So if I find a valid email alias, I can relay mail through your proxy to anyone. -Joe -- Joe Stewart Information Security Analyst jstewart () lurhq com ----------------------------------------- "24x7 Enterprise Security Monitoring" LURHQ Corporation http://www.lurhq.com/
Current thread:
- Possible syslogd DoS ? Petr Baudis (Oct 03)
- Re: Possible syslogd DoS ? Crist J. Clark (Oct 04)
- Re: Possible syslogd DoS ? VeNoMouS (Oct 04)
- Re: Possible syslogd DoS ? VeNoMouS (Oct 04)
- Re: Possible syslogd DoS ? Petr Baudis (Oct 04)
- Re: Possible syslogd DoS ? Petr Baudis (Oct 05)
- Re: Possible syslogd DoS ? H D Moore (Oct 05)
- Re: Possible syslogd DoS ? Tim Walberg (Oct 05)
- Re: Possible syslogd DoS ? Petr Baudis (Oct 05)
- AnalogX Proxy SMTP server relay Claymore (Oct 05)
- Re: AnalogX Proxy SMTP server relay Joe Stewart (Oct 06)
- Re: Possible syslogd DoS ? Robert van der Meulen (Oct 04)
- Re: Possible syslogd DoS ? White Vampire (Oct 04)
- Re: Possible syslogd DoS ? Pavel Kankovsky (Oct 07)
- Re: Possible syslogd DoS ? Thiago Conde Figueiro (Oct 04)
- <Possible follow-ups>
- RE: Possible syslogd DoS ? Brian McKinney (Oct 04)
- Re: Possible syslogd DoS ? Petr Baudis (Oct 04)