• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1407
  • Last Modified:

monitor smtp traffic

I would like to montor an SMTP traffice going between 2 computers.
I don't have an email server(Exchange server, Domino,etc...).
I wonder if it's enough just to install SMTP service in both computers and download a tool(if there is any) from internet and test SMTP connection.

Thanks
0
jskfan
Asked:
jskfan
  • 7
  • 6
1 Solution
 
Sjef BosmanGroupware ConsultantCommented:
To monitor SMTP traffic, you can install WireShark on a third system.

You can set up a simple email server, e.g. using Linux, or any free SMTP server you can find. This one is freeware, seems a pretty popular one:
http://www.tucows.com/preview/195629
0
 
jskfanAuthor Commented:
I am using 2 windows 2003 server boxes.
How do I start your approach?
0
 
Sjef BosmanGroupware ConsultantCommented:
Download and install the server software, create some accounts and start outlook to send mail from one of the accounts to another one.
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 
jskfanAuthor Commented:
I installed the sambar server 7.0, where do I add users.
any more step by step to get it working, please?
0
 
Sjef BosmanGroupware ConsultantCommented:
Apparently, Sambar only has an SMTP proxy and is not a complete server. Anyway, I couldn't find it either how to create users. So sorry...

Maybe this server is better, it seems to be anyway:
http://www.tucows.com/preview/601968
"MDaemon FREE mail server software is a 5-user license version of the award-winning MDaemon Email Server for Windows."
0
 
jskfanAuthor Commented:
I have enabled SMTP service in one computer and Telneted to it from another computer on port 25.
example: Telnet  10.10.10.10 25

would that be enough to test SMTP connection between 2 computers?
0
 
Sjef BosmanGroupware ConsultantCommented:
Enough? No. You've only established that there's a server on the other side but you don't have proof that it works 100% correctly. The least you can do is create some SMTP-users on the server and use Outlook to those users. E.G. set up John Doe and Jack Chit on the server. Create an Outlook account for John Doe, and send some mails to the server for Jack Chit. Check on the server that mail arrived (there must be logs). Now you've tested SMTP communication.

If you want to test POP3 communication as well, set up an Outlook account for Jack Chit (on the same or on a different system), and try to receive your mail.
0
 
GhousullahCommented:
Please confirm why you need to test SMTP traffic. Based on your requirement I can suggest you the options.
0
 
jskfanAuthor Commented:
I don't have an SMTP server such as Exchange server. I have enabled SMTP services in one computer(SMTPCOMPUTER), then trying to telnet to it through port 25.
for test purposes,There are some computer to which I permitted TCP 25 Through IPSec policy, and they can telnet on port 25 to SMTPCOMPUTER, but the other ones to which I Required Security, it shows Negotiate Security when I telenet on port 25 to SMTPCOMPUTER.

Now my question is the SMTP Traffic flowing between the computers to which I REquired Security on port 25 to the SMTPCOMPUTER or the SMTP traffic is blocked. How do I know that?
Unfortunately we don't manage our exchange server, unless if I can get some help to how to relay and email to the exchange server using the SMTPCOMPUTER.
0
 
jskfanAuthor Commented:
Ghousullah:

I want SMTP traffic between 2 computers to be secure.
I want to confirm that it's flowing between 2 computers in a secure way.
0
 
Sjef BosmanGroupware ConsultantCommented:
Then don't use port 25, instead use port 465 and Secure SMTP with SSL.

Did you already download WireShark?? http://www.wireshark.org/
0
 
jskfanAuthor Commented:
<<Then don't use port 25, instead use port 465 and Secure SMTP with SSL.>>

I am using IPSec inside the LAN so it's Active Directory Kerberos ,not Certificate.
when teleneting to port 25 , you are testing SMTP I believe. that's what I am doing.
I downloaded wireshark. I also use Network Monitor to capture traffic between 2 computers it shows ESP frames, that means secure. Correct?

0
 
jskfanAuthor Commented:
any updates?
0
 
Sjef BosmanGroupware ConsultantCommented:
I have no detailed knowledge of IP or TCP/IP, so I can't tell if it's secure. Maybe this question should be added to the TCPIP Topic Area of EE?
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

  • 7
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now