Re: [TCPIP] How to configure SMTP outgoing only

From: JF Mezei (jfmezei.spamnot_at_teksavvy.com)
Date: 05/29/04 

Date: Sat, 29 May 2004 17:28:38 GMT

Michael Austin wrote:
> for security... as long as you long as you do not allow relays and you
> run a stack that is not vulnerable to buffer overruns, then I do not
> consider smtp to be a serious "threat"...

In practice correct. However, if a machine contains sensitive data, you may
wish to reduce any/all potential exposures.

Also, another "security" you may wish to add is protecting the TCPIP$SMTP*
queues, giving them an ACL so that only certain users are allowed to "submit"
outbound messages.

Relevant Pages

  • Re: Buffer over-run vulnerabilities
    ... More commonly (via stack buffer overruns) the inserted "data" contains ... execute is tricky and specific to each exploit, ...
    (comp.os.linux)
  • Re: IP Level Encryption
    ... >> that are not subject to buffer overruns. ... > types and pointers on the stack. ... struct *pabc; ... more difficult to *find* than the common stack smashing vulnerability, ...
    (sci.crypt)
  • Re: Debugging tips needed - application dies on WinXP SP2
    ... lot more checking of stack integrity, including detecting buffer overruns in the stack. ... I can't pin it down specifically to the list control operations, ... MVP Tips: http://www.flounder.com/mvp_tips.htm ...
    (microsoft.public.vc.mfc)
Loading