邮件服务器-邮件系统-邮件技术论坛(BBS)

标题: 如何检测邮局是否存在中继漏洞? [打印本页]

作者: 山坛兄弟    时间: 2011-7-6 18:02
标题: 如何检测邮局是否存在中继漏洞?
很多人都对自己的邮局进行的严格的配置,但是还是很担心是否存在中继的漏洞?使用类似于DOS的命令来进行检测,俺还没有到那个水平,语句那么多也懒得去记住,那么有没有简单的方法可以检测呢?

肯定是有的,通过下面的网站就可以进行所有的检测了:
http://www.abuse.net/relay.html

直接在Address to test:中输入邮局的IP,然后点击Test for Relay就可以了,多简单啊!
作者: 山坛兄弟    时间: 2011-7-6 18:04
Mail relay testing
Connecting to 58.64.*.* for anonymous test ...
<<< 220 ESMTP on WinWebMail [3.8.1.3] ready.  http://www.winwebmail.com
>>> HELO www.abuse.net
<<< 250 HELO


Relay test 1
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@abuse.net>
<<< 250 OK
>>> RCPT TO:<securitytest@abuse.net>
<<< 550 Local user only or Authentication mechanism

Relay test 2
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest>
<<< 503 input error.

Relay test 3
>>> RSET
<<< 220 OK
>>> MAIL FROM:<>
<<< 250 OK
>>> RCPT TO:<securitytest@abuse.net>
<<< 550 Local user only or Authentication mechanism

Relay test 4
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<securitytest@abuse.net>
<<< 550 Local user only or Authentication mechanism

Relay test 5
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@>
<<< 250 OK
>>> RCPT TO:<securitytest@abuse.net>
<<< 550 Local user only or Authentication mechanism

Relay test 6
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<securitytest%abuse.net@[58.64.*.*]>
<<< 550 Local user only or Authentication mechanism

Relay test 7
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<securitytest%abuse.net@>
<<< 550 Local user only or Authentication mechanism

Relay test 8
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<"securitytest@abuse.net">
<<< 550 Local user only or Authentication mechanism

Relay test 9
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<"securitytest%abuse.net">
<<< 505 input error.

Relay test 10
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<securitytest@abuse.net@[58.64.*.*]>
<<< 550 Local user only or Authentication mechanism

Relay test 11
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<"securitytest@abuse.net"@[58.64.*.*]>
<<< 550 Local user only or Authentication mechanism

Relay test 12
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<securitytest@abuse.net@>
<<< 550 Local user only or Authentication mechanism

Relay test 13
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<@[58.64.*.*]:securitytest@abuse.net>
<<< 550 Local user only or Authentication mechanism

Relay test 14
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<@:securitytest@abuse.net>
<<< 550 Local user only or Authentication mechanism

Relay test 15
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<abuse.net!securitytest>
<<< 505 input error.

Relay test 16
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<abuse.net!securitytest@[58.64.*.*]>
<<< 550 Local user only or Authentication mechanism

Relay test 17
>>> RSET
<<< 220 OK
>>> MAIL FROM:<spamtest@[58.64.*.*]>
<<< 250 OK
>>> RCPT TO:<abuse.net!securitytest@>
<<< 550 Local user only or Authentication mechanism

Relay test result
All tests performed, no relays accepted.
作者: jiayoua    时间: 2011-12-8 13:04
万一这个网站是用来收集可中继邮局信息……
作者: lvshiwudi    时间: 2011-12-9 10:01
先留个名,不知3楼说的有没有道理,0-0,以后慢慢研究。、
谢楼主先
作者: 山坛兄弟    时间: 2011-12-10 12:16
原帖由 jiayoua 于 2011-12-8 13:04 发表
万一这个网站是用来收集可中继邮局信息……


你以为不检测别人就知道不了你的服务器漏洞了?只要会配置,还怕中继漏洞吗?
作者: looboo    时间: 2011-12-19 11:31
Not Found
The requested URL /cgi-bin/relaytest was not found on this server.




欢迎光临 邮件服务器-邮件系统-邮件技术论坛(BBS) (http://bbs.5dmail.net/) Powered by Discuz! X3.2