On Wed, 20 Apr 1994, Jonathan B. Horen wrote:
> Jeez, guys -- here's a free consult:
>
> "Mail Spoofing"; ever heard of it?
>
> All someone has to do is to
>
> telnet your_mail_server 25
>
> and they're "in", at least, as far as posting email is concerned,
> via SMTP (Simple Mail-Transport Protocol). They can't delete or
> edit anything, but they *can* post mail to anybody, anywhere,
> using any name they wish.
>
> So, using this command Joe Joker can enter, and then set
> MAIL FROM: your_name
> RCPT TO: your_list_alias
> DATA: .....
>
Is there a way to block such posts by non-members? Detect their
originating route, id, etc. and block?
James
References:
|
|
