Re: SMTP vulnerabilities

["Dennis Stout" <crazyman@xxxxxxxxxxxxx>]

Here's a question that has to do with mail, speaking of such things!  How do
I find out who is sending me all the junk I get?  The email address they
send from never works..  And the message header is all fubar.  I want to
find out where it all comes from and, not do anything illegal or unethical,
but something just to let them know someones figured them out.  Like a
moderatly long but not so huge ping flood that it denies service.  Soemthing
that has a good duration so they can't miss it in the logs, if they look at
such things.  Thanks!

Dennis

----- Original Message -----
From: "Jihène Krichène" <jihene_krichene@yahoo.fr>
To: <security-discuss@linuxsecurity.com>
Sent: Saturday, December 01, 2001 02:53 HRS
Subject: SMTP vulnerabilities


> Hello everybody
>
> As you know, SMTP is vulnerable to DoS attacks (mail bombing and
spamming).
> You agree also that the solution is PGP or S/MIME.
>
> Suppose that you are asked to detect the vulnerabilities of a LAN, how do
> you proceed to know if the server SMTP is vulnerable to DoS attacks ? In
> other words, how can you check if this server uses PGP or S/MIME or at
least
> IPsec?
>
> Best regards
>
> ___________________________________________________________
> Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
> Yahoo! Courrier : http://courrier.yahoo.fr
> ------------------------------------------------------------------------
>      To unsubscribe email security-discuss-request@linuxsecurity.com
>          with "unsubscribe" in the subject of the message.
>


------------------------------------------------------------------------
     To unsubscribe email security-discuss-request@linuxsecurity.com
         with "unsubscribe" in the subject of the message.