General discussion

Locked

email account privacy violation (Exch 5.

By fmoreno ·
I need know if someone can me suggest ..... how can I detect the intruder ? My email service is exchange 5.5 and the clients uses outlook 2000 with pop3.

Issue descrption: Mistery "person" is sending several messages like another person.

In advance tks a lot !!!

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

You've been biiten by a weakness in SMTP

by CBR1100XX In reply to email account privacy vio ...

Extremely difficult to do. Track the abuser that is.

Basically if you know how, and the commands to give, ANY, and I stress ANY, SMTP server will believe the 'abuser' mail is a legitimate mail from the 'real' sender. It involves a telnet sessionon port 25 and commands like helo (spelling is correct). However this is not the forum that ........

Only way to track it, is to do full auditing on the IMC within Exchange. Don't do this for too long as your exchange event logs will fill up within a heartbeat.

Good luck

B.

Back to Security Forum
1 total post (Page 1 of 1)  

Related Discussions

Related Forums