LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Reply
 
Search this Thread
Old 09-01-2003, 05:27 AM   #1
etc
LQ Newbie
 
Registered: Jul 2003
Posts: 7

Rep: Reputation: 0
Port 25 - smtp on Mail Server


Hi all

1) Is port 25 usually open or required open on any mail server?

I suppose it is a security breach, from administration point of view what purpose does it serve?

thanks
 
Old 09-01-2003, 06:41 AM   #2
jalal
Member
 
Registered: Aug 2003
Location: .bh
Distribution: Gentoo
Posts: 188

Rep: Reputation: 30
Yes, if you have a mail server, you will need to have port 25 open.

SMTP (Simple Mail Transfer Protocol) is needed so your clients can send mail, and port 25 is the well-known port for it.

You can usually tell your mail server to listen on another port though, and your clients will need to change thier mail client settings.
 
Old 09-01-2003, 07:25 AM   #3
etc
LQ Newbie
 
Registered: Jul 2003
Posts: 7

Original Poster
Rep: Reputation: 0
Agreed that the port 25 need be open, but what about the ease with which one can telnet onto port 25 and send / recieve mails using any name without authentication.

What is done in this case, is the telnet service blocked or what are the other options?

Thanks
 
Old 09-01-2003, 11:13 PM   #4
jalal
Member
 
Registered: Aug 2003
Location: .bh
Distribution: Gentoo
Posts: 188

Rep: Reputation: 30
For this, you'll need an email server with some Anti-Spoofing features, e.g., your mail server can accept only a valid account and also asks for that account's password before letting that user send any mail.

Users also don't need to use Telnet to do that (abusing port 25), they can do the same with their mail client.
 
Old 09-01-2003, 11:49 PM   #5
etc
LQ Newbie
 
Registered: Jul 2003
Posts: 7

Original Poster
Rep: Reputation: 0
Quote:
Originally posted by jalal
For this, you'll need an email server with some Anti-Spoofing features, e.g., your mail server can accept only a valid account and also asks for that account's password before letting that user send any mail.


Okay so the mail server by default will allow any@its-domain and un-authenticated mail transactions (Surprising to me, Please correct me if am worng).

Is this the case with sendmail, qmail as well? How does one enable Anti Spoofing on Exchange 2000?

Quote:
Users also don't need to use Telnet to do that (abusing port 25), they can do the same with their mail client.
Can you please explain how, thanks.

Last edited by etc; 09-01-2003 at 11:57 PM.
 
Old 09-02-2003, 01:04 AM   #6
jalal
Member
 
Registered: Aug 2003
Location: .bh
Distribution: Gentoo
Posts: 188

Rep: Reputation: 30
an Email server's default depends on that mail server, could be secure, could be not.

To spoof using your favourite mail client, just enter fake information in the settings, e.g. just tell your mail client that you are jalal@domain instead of etc@domain

can't help with exchange 2000 though, sorry!
 
Old 09-02-2003, 01:53 AM   #7
etc
LQ Newbie
 
Registered: Jul 2003
Posts: 7

Original Poster
Rep: Reputation: 0
Using mail client: Ximian Evolution worked flawlessly . I changed the identity and it spoofed !!

The same did not work iwith MS Outlook.

Is this a server related or client related problem, please explain.
 
Old 09-02-2003, 01:59 AM   #8
jalal
Member
 
Registered: Aug 2003
Location: .bh
Distribution: Gentoo
Posts: 188

Rep: Reputation: 30
This is a server thing. Did you use both clients on the same server and user ID ? if so, you might have mis-configuration somewhere.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Cron mail sending using outside SMTP mail server Utah Linux - Software 6 08-24-2005 07:44 PM
Smtp Mail Server Delish Linux - Software 4 11-02-2004 08:52 AM
smtp server can't get port 25 Charles Daniel Linux - Security 1 10-26-2004 07:27 AM
POSTFIX: Changed SMTP port - now can't send mail (long) cnjvh Linux - Software 1 07-13-2004 01:40 PM
SMTP Mail Server How To facefullofsnow Linux - Software 5 07-16-2003 01:03 AM


All times are GMT -5. The time now is 01:31 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration