Solved

Refuse any command when telnet to port 25

Posted on 2002-06-13
4
149 Views
Last Modified: 2006-11-17
how can I protect my mail server such as MS exchange from anyone who telnet to port 25 and then use any command such as VRFY to verify users on my mail server ??
0
Comment
Question by:sirator
  • 2
4 Comments
 
LVL 31

Accepted Solution

by:
rid earned 50 total points
ID: 7076095
The server software may have (should indeed have) an option to discard/deny VRFY commands. Look for this.

Regards
/RID
0
 
LVL 15

Expert Comment

by:samri
ID: 7084980
There is some information found on this link.

Scroll to the middle of the page.

http://216.239.33.100/search?q=cache:gSTBYPODqkgC:www.ima.com/pdf/ienews/vol4no6.pdf+disable+vrfy+ms+exchange&hl=en&ie=UTF8

I hope this helps.
0
 

Author Comment

by:sirator
ID: 7101444
Thanks , rid,but I see most of mail servers are already tuned for not permitting to use VRFY, Is it right ?
0
 
LVL 31

Expert Comment

by:rid
ID: 7102007
I think most defaults to reject VRFY commands, yes.

Rejecting ALL commands if they come from a telnet session may be another matter. Since SMTP commands are a bit on the simplistic side, doing them by telnet isn't too complicated. You'd have to reject telnet sessions only, and not SMTP session. Perhaps some firewall setting could do this, but what is to gain from that?

Regards
/RID
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Are you irritated by repeating emails issue in Microsoft Outlook 2016 after recent update ?  Lets’ see how to resolve and prevent duplicate emails in the Outlook 2016 using some simple techniques.
An analysis of the phishing scam that has been affecting Google users, along with steps to take for protection, as well as what to do if you receive one of the emails.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
Many of my clients call in with monstrous Gmail overloading issues with Outlook. A quick tip is to turn off the All Mail and Important folders from synching. Here is a quick video I made to show you how to turn off these and other folders in Gmail s…

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now