Results 1 to 2 of 2

Thread: How can be externally exploited the MTA to send email on my behalf?

  1. #1
    Join Date
    Aug 2010
    Location
    Monterrey, Mexico
    Posts
    68
    Rep Power
    5

    Question How can be externally exploited the MTA to send email on my behalf?

    Hi guys,

    I've been checking my mailbox.log since yesterday tracking for an exploit that in some way deals to send email
    through the MTA using my account and giving no trace of its intrusion.

    Look following log information:
    2013-05-06 03:09:15,362 INFO [LmtpServer-929] [ip=172.16.5.5;] lmtp - Delivering message: size=2295 bytes, nrcpts=1, sender=esantos@mydomain.com, msgid=<20130506021455.001330E46F4416EA@mydomain.co m>
    2013-05-06 03:09:15,367 INFO [LmtpServer-929] [name=esantos@mydomain.com;mid=2;ip=172.16.5.5;] mailop - Adding Message: id=19645, Message-ID=<20130506021455.001330E46F4416EA@mydomain.com>, parentId=-1, folderId=2, folderName=Inbox.
    2013-05-06 03:09:15,391 INFO [LmtpServer-929] [] ProtocolHandler - Handler exiting normally
    ... say, what? it is even sending the message from my internal IP !!!.

    I've seen this before, but as an exploit of an email client that runs an script/hack i.e. Outlook, so it can send email using the client application where
    apparently its in your behalf so you can't notice it is happening, but, what about the case above?.

    What can you suggest me to track the real punk is doing this?

    Thanks in advance!!!! PoKo!

  2. #2
    Join Date
    May 2007
    Location
    Oklahoma
    Posts
    703
    Rep Power
    9

    Default

    LMTP is the local delivery to your local mailbox. This is not the log showing the mail coming into the system.

Similar Threads

  1. Replies: 1
    Last Post: 09-09-2012, 10:54 PM
  2. Cannot Send Email Externally
    By Charlesdita in forum Administrators
    Replies: 3
    Last Post: 12-18-2011, 06:19 AM
  3. Send on Behalf
    By benanthony in forum Administrators
    Replies: 27
    Last Post: 02-23-2010, 02:15 AM
  4. Unable to send mail externally
    By dalekurt in forum Administrators
    Replies: 4
    Last Post: 05-12-2008, 07:32 PM
  5. send-on-behalf
    By xequb in forum Administrators
    Replies: 3
    Last Post: 01-23-2008, 12:52 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •