Anonymous SMTP

[hthite]

Er, I happened to notice that port 25 allows anonymous SMTP... Any way to disable it?

[IUDICIUM]

Well, sure it allows "access" but it won't work if they stopped everyone from accessing it.

Other than that -- What do you mean by "anonymous" ?
:confused:

[hthite]

I think you are able to use the SMTP @ bluehost to send emails without logging in to one of the email accounts setup at one of the domains hosted by BH.

So basically, anyone with an email client will be able to use the SMTP @ BH to send mails, even without authentication.

The problem being, it can be used for spamming.

[IUDICIUM]

:eek: We can test this theory using:
http://www.yuki-onna.co.uk/email/smtp.html

=)
-Sx-

[IUDICIUM]

I keep getting an "Administrative Prohibited" error.

Are you completely sure it's a spam tunnel?
Being "open to access" and being an open relay are not the same thing. :D

[hthite]

Er, my bad... Checked it using the telnet method, as well as using an email client.

Sorry about that.

SMTP @ BH does require authentication, and does not allow anon connections. In fact, it's mentioned to that effect in the mail part of cPanel.