mta_for_beginners_plus_security

This is part of The Pile, a partial archive of some open source mailing lists and newsgroups.



Date: Mon, 27 Nov 2000 13:29:57 -0800
To: SVLUG <svlug@svlug.org>
Subject: Re: [svlug] What is the requirement of setting up a mail server?
From: Rick Moen <rick@linuxmafia.com>

begin  Jonathan Khoo quotation:

> Pardon my ignorance. How do the bad guys scan for vulnerable hosts?

I'd immodestly suggest the following article for background:
http://www.linuxworld.com/linuxworld/lw-2000-08/lw-08-expo00-hacking_p.html

> What exactly is meant by backdoors? An account for them to login?? 

No.  A hidden way to get back in, if admins try to kick them off.  
For example, a concealed service, or something added to a legitimate 
service, that can be invoked to open up a remote root shell.

> Also, what is MTA?

Mail Transfer Agent.  The category of software that carries out SMTP to
move mail between hosts.  As distinct from Mail User Agent or Mail
Delivery Agent.

> I have heard so much about vulnerable networks, question is how do I
> detect the loopholes?

That's one of the main problems, along with damage-reduction, defence in
depth, identification of the attackers, recovery, possible
countermeasure, security policies, etc.  There's no pat and easy answer
-- but you've just acquired a new hobby, if you want one.  ;->

===


the rest of The Pile (a partial mailing list archive)

doom@kzsu.stanford.edu