Re: Exim mail

[Thomas Hallaran <thallara@watson.wustl.edu>]

spoofing mail:
telnet to port 25 on machine you want to spoof through.
    1.Type 'mail from: Satan@hell.edu'  (address you want to send mail as)
    2.Type 'rcpt to: target@someplace.net'(person you are sending mail to)
    3.Type 'data'
    4.Type 'whatever you want , ending with a period on its own line.'
    5.Type quit

here is the smtp rfc:
http://www.ietf.org/rfc/rfc0821.txt
here is a primer on fake email:
http://scipp.ucsc.edu/~mothra/support/fake_email.html
here are dos on securing sendmail:
http://mail-abuse.org/tsi/ar-fix.html


Tom Hallaran
Informatics
Washington University Genome Sequencing Center
314-286-1114
thallara@watson.wustl.edu





On Fri, 14 Dec 2001, Daniel Rychlik wrote:

> How do I stop this from happening.  Apparently my bud telented to port 25
> and somehow sent mail from my root account.  Any suggestions, white papers
> or links?  Id would like to block the telnet application all together, but I
> dont think thats possible.
> 
> Thanks in advance,
> Daniel
> 
> im a newbie so please send flame mail to mail@rychlik.ws>null   thanks.
> 
> Heres what he sent to me...
> 
> ----- Original Message -----
> From: <root@rychlik.ws>
> Sent: Thursday, December 13, 2001 10:03 PM
> 
> 
> > hehe this wasnt so hard either, i guess that makes me a pimp? lmfao,
> anyway learn to call a brotha damnit! and dont act like you dont know who
> dis be! foo! hehehe later..
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 
>