Windows 10: TELNET and email security SEND email without password

Hi folks

seems some servers can allow telnet on the ISP / remote email server's port 25 without you having to enter a password -- and you can send an email

Not sure what these commercial ISP servers do but is there anyway to block this if using your own domain / hosting servers email systems. Just making use of telnet difficult doesn't to me seem a sufficient answer.

I tried this (as normal user not admin).

telnet <smtp servername 25>
EHLO <servername>

mail from: <email address> (don't forget the ':')

rcpt to: <target email address>

DATA now wait for the go ahead response (354 go ahead)

subject: <subject> e.g test from telnet.

enter a blank line
then your email text plus a blank line or two

finish with a single '.' (full stop) on a new line

you should get something like 250 message accepted

then QUIT

you'll get 221 smtpout.<url>

connection closed by foreign host.

Now check say with outlook and you'll find your email message assuming as test you sent it to a mailbox which you have access to.

Seems a bit of a security flaw here. Or certainly possibly a spammers paradise !!!.





Any ideas on how to beef up the security - especially if it's on say a domain you own. Not sure if there's anything you can do though on ISP email servers.

Cheers
jimbo

:)

 

Unauthorized Emails from my account?

It is more than likely that your email account was hacked, either by a virus sniffing your password, or just simply hacked.

Either way, change your password on your email account. Unfortunately the damage by already be done. They already have your contact list and your email address associated with that contact list. There is nothing stopping them from sending out emails using their own SMTP servers to everyone on your contact list and claiming the emails are from your email address. They don't actually have to have access to your yahoo account or even any yahoo server to send emails to people that come from your address.

 

Email clients not remembering passwords

Hi all

A friends computer will not remember his gmail password. He used to use outlook, and seeing that I use thunderbird and it would be easier to troubleshoot I installed that for him. Now that was working for a few weeks, and now the same problem is occuring.

We are 100% sure the password is correct, as we can access the email account through webmail, but the local clients will not remember the correct password. Of course the 'Remember password' button is checked, but still no good.

It returns with incorrect password.

Any suggestions?

 

Hacker Keeps resetting my Live email password.

I think he is trying hard to get to my Steam account again. Like I added in my first post I had a password reset for steam email.

And last time he did it I had several password reset emails in my live before (I suppose) he got it to work.

Now I don't even feel like my gmail is safe. I have it set up for Phone SMS and 2 step verification. Although I think he is having a hard time with my gmail.

HOW IS HE DOING IT!