OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: smtp auth question

From: Omer Faruk Sen (omerfaruk.net)
Date: Wed Jun 02 2004 - 01:42:08 CDT

I have verified myself that using valid username/password for smtp-auth
but changing From: line can be done easily by modifying Outlook (Tools
-->Accounts -->Mail -->Properties -->General-->Email addresss ..)

>>Thus a clever!!
>> user can abuse it with authenticating against my smtp server but can
>> send mails under another account. Is there a way to prevent this?
>>
> They will need to know the password of the account they are using to
> send out with. SMTP-AUTH reuires a vaild username & password pair.
> If they only know their own username & password then they can't do as
> you suspected.
>
>
> --
> Regards
> Mick Pollard ( lunix )
> ------------------------------------------------
> BOFH Excuse of the day:
> Static Registry Underflow Error
>

--
Omer Faruk Sen
http://www.faruk.net
Public Key: http://www.faruk.net/omer.asc