SMTP without AuthLogin

[phpz]

السلام عليكم
ماهى الطريقة لوضع حماية على سيرفر SMTP
وشكرا لكم

[phpz]

up

[AntiServer]

sorry but thats not a clear quesion ,, what is the OS u use ,, what is the smtp daemon u use ,, what do u mean with securing smtp ,,,

need more infoz

[phpz]

ok thanks first for your replay

i wonaa to Install authlogin for smtp mail server
ihave this exploit in my server :

##########################
Mail Servers : SMTP without AuthLogin
##########################
Port : 25
Description : An SMTP service supports VRFY.
How to fix : Install authlogin.
Risk Level : Low


My OS is linux RedHat 9 with Cpanel

thank you for help

[phpz]

i think the smtp is : ESMTP Exim 4.24

[AntiServer]

u think ,, u must be sure ,, plz be sure first else better u tell me which mechanismus is using by ur exim daemon ,, the plain or login or the md5 mechanismus ,,

open the

/etc/exim/passwd 

and see what u have there

[AntiServer]

as ur sec-report says ,, the risk is low ,, thats mean any user can send email from ur server ,, thats all

[code4arab]

رد مقتبس من AntiServer
as ur sec-report says ,, the risk is low ,, thats mean any user can send email from ur server ,, thats all

In fact, It's not a low-risk vuln, because spammers can use his server to send mailing lists without authentication

[AntiServer]

رد مقتبس من code4arab
In fact, It's not a low-risk vuln, because spammers can use his server to send mailing lists without authentication

did u try to send email by the way he is speaking about ,, if yes ,, then u would not say maling lists

[code4arab]

I didnt look at his server
what I want to say is that anyone can use the smtp server if the it's configured to be used without authentication

that's it

[dubainet]

guys , please talk in Arabic
most of the language is wrong and not clear and we didn't get the point

if you are really intersted in English language you can join webhostingtalk or other english websites's .

not saying don't talk , but if you want talk please in clear english not wrong spelling language .

and sorry for writing in english , I don't have Arabic windws around here

sorry guys , but want the best for all other clients

[code4arab]

SO MY ENGLISH IS BAD

CAN YOU PLEASE POINT OUT THE WRONGE SPELLING LANGUAGE WRITTEN BY ME

[AntiServer]

رد مقتبس من code4arab
I didnt look at his server
what I want to say is that anyone can use the smtp server if the it's configured to be used without authentication

that's it

can be used .... thats right but not for malling lists ,, thats all





dubainet :funny: :funny:
1 . most of the language ____ where did learn that
2. we didn't get the point ___ the point is clear but may u douno what we r speaking about
3. intersted ___ written interested
4. not saying don't talk ____ street language
5. I don't have Arabic windws around here ___ my suse does not support the arabic ,, so better to play away

[dubainet]

Hey , you are the last one who talkes about the language

I'll sow you what kind of language you are talking lol

1
can be used .... thats right but not for ((maling lists)) ,, thats all

mailling)) list baby haha

2
we didn't get the point ___ the point is clear but ((may u douno ))what we r

What ???
may u douno , should be
(you may not know )

3
. not saying don't talk ____ street language

it's not a street language , you should go to a university or a college and they will teach you how to talk right

4
did u try to send email by the way he is speaking about ,, if yes ,, then u would not say maling lists

he speaking about ? what language is this , maybe indian english speaking people

5
sorry but thats not a clear quesion ,, what is the OS u use ,, what is the smtp daemon u use ,, what do u mean with securing smtp

questuion should be written like this
( question)
and what do you me with ???
what do you mean by !!

please don't use the language if you are not expirt in it or people will laugh at you
just say i'm not good in english and no one will blame you

kids :funny: :funny: :funny:

[AntiServer]

i did not say that am profi in english or in arabic too u ****** ,, it is better for me to write in english ,, so i douna lose much time to help if i can ,, we wait u st*** to make us arabic screen tastatur under linux to type with # for ppl who douna have arabic keyboard #


yes am a kid ,, but may we will see each other again