Full Disclosure mailing list archives

Re: Is the FBI using email Web bugs?


From: "Daniel B" <dan () lockedbox net>
Date: Thu, 8 Jan 2004 08:51:29 +0000

"Gregh" <chows () ozemail com au> wrote:


----- Original Message -----
From: "Poof" <gui () goddessmoon org>
To: "'Gregh'" <chows () ozemail com au>
Cc: <full-disclosure () lists netsys com>
Sent: Thursday, January 08, 2004 1:22 PM
Subject: RE: [Full-disclosure] Is the FBI using email Web bugs?


Actually- the problem with that is that fine... it won't allow any ports
except for the needed 25/110/143... Then what's to stop an image from
using
http://www.spamsite.com:25/110/phonehome.jpg?emailaddress(or whatever)

.. Nothing!


Not sure if I understand you correctly but with a simple ZA I can block OE
from contacting on port 25 outbound..... that what you meant?

Greg.

Umm, you could, but you might have trouble sending email! 
Daniel.
PS. That is if your using SMTP, i seem to remember MS Exchange normally uses
135 for most comms.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: