[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 155
  • Last Modified:

Refuse any command when telnet to port 25

how can I protect my mail server such as MS exchange from anyone who telnet to port 25 and then use any command such as VRFY to verify users on my mail server ??
0
sirator
Asked:
sirator
  • 2
1 Solution
 
ridCommented:
The server software may have (should indeed have) an option to discard/deny VRFY commands. Look for this.

Regards
/RID
0
 
samriCommented:
There is some information found on this link.

Scroll to the middle of the page.

http://216.239.33.100/search?q=cache:gSTBYPODqkgC:www.ima.com/pdf/ienews/vol4no6.pdf+disable+vrfy+ms+exchange&hl=en&ie=UTF8

I hope this helps.
0
 
siratorAuthor Commented:
Thanks , rid,but I see most of mail servers are already tuned for not permitting to use VRFY, Is it right ?
0
 
ridCommented:
I think most defaults to reject VRFY commands, yes.

Rejecting ALL commands if they come from a telnet session may be another matter. Since SMTP commands are a bit on the simplistic side, doing them by telnet isn't too complicated. You'd have to reject telnet sessions only, and not SMTP session. Perhaps some firewall setting could do this, but what is to gain from that?

Regards
/RID
0

Featured Post

Take Control of Web Hosting For Your Clients

As a web developer or IT admin, successfully managing multiple client accounts can be challenging. In this webinar we will look at the tools provided by Media Temple and Plesk to make managing your clients’ hosting easier.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now