bugtraq - Re: Exploiting Google MX servers as Open SMTP Relays

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 10 May 2008 16:42:19 -1000
From: Clifton Royston <cliftonr@...a.net>
To: "Todd T. Fries" <todd@...es.net>
Cc: bugtraq@...urityfocus.com
Subject: Re: Exploiting Google MX servers as Open SMTP Relays

On Sat, May 10, 2008 at 01:04:42PM -0500, Todd T. Fries wrote:
> Yes this is very frustrating.
> 
> The details are not so hard to guess.  Unless this post is different,
> anyone can send an email to a nonexistent user at a google service and
> they accept it and bounce back to the envelope recipient. *sigh*.

  Google outscatter is one longstanding problem, but this is a
different problem which allows spammers to use Google's MXes as their
outbound mailservice.

  Google's chronic silence on all abuse reports makes it impossible to
tell whether they've taken any action on the problem, whether the
problem reports have even made it to the operational staff responsible
for the mailservers, or whether they simply don't care.

  I'm sure you can all make your own snarky comments re "Do no evil".

  -- Clifton

-- 
    Clifton Royston  --  cliftonr@...dicomputing.com / cliftonr@...a.net
       President  - I and I Computing * http://www.iandicomputing.com/
 Custom programming, network design, systems and network consulting services