forums.huyett.us

something different
It is currently Thu Jun 22, 2017 3:41 pm

All times are UTC - 5 hours




Post new topic Reply to topic  [ 1 post ] 
Author Message
 Post subject: Mail Relays
PostPosted: Thu Jan 15, 2004 3:28 pm 
Offline
Admin
Admin
User avatar

Joined: Mon Jan 20, 2003 5:37 pm
Posts: 58
This was accomplished on a linux box but the exact same commands will work under Windows.

First we need to find a mail server... Lets target Hotmail since I know of two accounts with them.
[root@elvis root]# nslookup
> set type=mx
> hotmail.com
Server: 207.153.216.130
Address: 207.153.216.130#53

Non-authoritative answer:
hotmail.com mail exchanger = 5 mx3.hotmail.com.
hotmail.com mail exchanger = 5 mx4.hotmail.com.
hotmail.com mail exchanger = 5 mx1.hotmail.com.
hotmail.com mail exchanger = 5 mx2.hotmail.com.

Authoritative answers can be found from:
hotmail.com nameserver = ns3.hotmail.com.
hotmail.com nameserver = ns4.hotmail.com.
hotmail.com nameserver = ns1.hotmail.com.
hotmail.com nameserver = ns2.hotmail.com.
mx1.hotmail.com internet address = 65.54.252.99
mx1.hotmail.com internet address = 64.4.50.99
mx1.hotmail.com internet address = 65.54.166.99
mx2.hotmail.com internet address = 65.54.254.145
mx2.hotmail.com internet address = 65.54.166.230
mx2.hotmail.com internet address = 65.54.252.230
mx3.hotmail.com internet address = 65.54.253.99
mx3.hotmail.com internet address = 64.4.50.239
mx3.hotmail.com internet address = 65.54.167.5
mx4.hotmail.com internet address = 65.54.253.230
mx4.hotmail.com internet address = 65.54.254.151
mx4.hotmail.com internet address = 65.54.167.230
ns1.hotmail.com internet address = 216.200.206.140
ns2.hotmail.com internet address = 216.200.206.139
ns3.hotmail.com internet address = 209.185.130.68
ns4.hotmail.com internet address = 64.4.29.24
> exit

Okay... we'll grab the first mail exchanger record (just because).
[root@elvis root]# telnet mx3.hotmail.com 25
Trying 64.4.50.239...
Connected to mx3.hotmail.com.
Escape character is '^]'.
220 mc3-f33.hotmail.com Microsoft ESMTP MAIL Service, Version: 5.0.2195.6824 ready at Thu, 15 Jan 2004 11:45:21 -0800
HELP
214-This server supports the following commands:
214 HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT VRFY
HELO hotmail.com
250 mc3-f33.hotmail.com Hello [207.153.206.116]
MAIL FROM:XXXXXX@hotmail.com
250 XXXXXX@hotmail.com....Sender OK
RCPT TO:YYYYYY@hotmail.com
250 YYYYYY@hotmail.com
DATA
354 Start mail input; end with <CRLF>.<CRLF>
Date: Thu Jan 15 14:44:24 EST 2004
From: XXXXXX@hotmail.com
To: YYYYYY@hotmail.com
Subject: Doh!
Reply-To: XXXXXX@hotmail.com

Who do you really think sent this?
.
250 Queued mail for delivery
QUIT
221 mc3-f33.hotmail.com Service closing transmission channel
Connection closed by foreign host.
[root@elvis root]#


Believe it or not, it sent the email. All without a password request.
Now. Since this is a Closed Relay, you will only be able to send emails to people within the same domain (hotmail.com). A Closed Relay will report the following when attempting to send outside....
RCPT TO: someone@OtherDomainName.com
550 5.7.1 <someone@OtherDomainName.com>... we do not relay <XXXXXX@hotmail.com>

Screenshot for the non-believer: http://forums.huyett.us/files/hotmail.jpg
Is this traceable/ can you get caught? Sure, by the IP Address through your ISP. And all mail servers work this way. But just due to the sheer number of hotmail users and the fact that one visits a local library to do their spamming puts this a bit on the wow side.


Last edited by jhuyett on Tue Sep 07, 2004 11:09 am, edited 1 time in total.

Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 1 post ] 

All times are UTC - 5 hours


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group