EMail Server Relay Check - Revision history

Bwachunas: /* Overview */

2020-02-05T17:31:33Z

Overview

← Older revision	Revision as of 13:31, 5 February 2020
(No difference)

Bwachunas: /* Overview */

2011-09-19T20:38:48Z

Overview

← Older revision		Revision as of 16:38, 19 September 2011
Line 7:		Line 7:
	* SMTP banner - reverse DNS mismatch		* SMTP banner - reverse DNS mismatch
	* Open Relay		* Open Relay
	* Bounce Messages or Non-Delivery Reports (~~NRS~~'s)		* Bounce Messages or Non-Delivery Reports (NDR's)
	* Listings on DNS-based Realtime Blacklists		* Listings on DNS-based Realtime Blacklists
	* DNS zone file MX and SPF lookups		* DNS zone file MX and SPF lookups

Bwachunas: /* Overview */

2011-08-23T00:56:15Z

Overview

← Older revision		Revision as of 20:56, 22 August 2011
Line 1:		Line 1:
	== Overview ==		== Overview ==

	The eMail Server Relay Check is a "swiss army knife" security tool designed for one-click testing of eMail servers for signs of misconfiguration or abuse. It is intended to be useful for ISPs performing security audits on their networks; and especially for server administrators who may be having problems delivering eMail to the Internet. If you have an eMail server facing the public Internet, there may be a wealth of information publicly available if you know where to look; instead of having to visit multiple web pages, you can perform multiple tests and queries with one click using the eMail Server Relay Check Tool. Port 25 outbound must be open for this tool to work.		The eMail Server Relay Check is a "swiss army knife" security tool designed for one-click testing of eMail servers for signs of misconfiguration or abuse. It is intended to be useful for ISPs performing security audits on their networks; and especially for server administrators who may be having problems delivering eMail to the Internet. If you have an eMail server facing the public Internet, there may be a wealth of information publicly available if you know where to look; instead of having to perform telnet, and nslookup (or dig) sessions, and visit multiple web pages, you can perform multiple tests and queries with one click using the eMail Server Relay Check Tool. Port 25 outbound must be open for this tool to work.

	The tool checks for the following:		The tool checks for the following:

Bwachunas: /* Overview */

2011-08-23T00:51:40Z

Overview

← Older revision		Revision as of 20:51, 22 August 2011
Line 1:		Line 1:
	== Overview ==		== Overview ==

	The eMail Server Relay Check is a "swiss army knife" security tool designed for one-click testing of eMail servers for signs of misconfiguration or abuse. It is intended to be useful for ISPs performing security audits on their networks; and especially for server administrators who may be having problems delivering eMail to the Internet. If you have an eMail server facing the public Internet, there may be a wealth of information publicly available if you know where to look; instead of having to visit multiple web pages, you ~~will get a lot of information~~ with one click using the eMail Server Relay Check Tool. Port 25 outbound must be open for this tool to work.		The eMail Server Relay Check is a "swiss army knife" security tool designed for one-click testing of eMail servers for signs of misconfiguration or abuse. It is intended to be useful for ISPs performing security audits on their networks; and especially for server administrators who may be having problems delivering eMail to the Internet. If you have an eMail server facing the public Internet, there may be a wealth of information publicly available if you know where to look; instead of having to visit multiple web pages, you can perform multiple tests and queries with one click using the eMail Server Relay Check Tool. Port 25 outbound must be open for this tool to work.

	The tool checks for the following:		The tool checks for the following:

Bwachunas: /* Overview */

2011-08-23T00:50:12Z

Overview

← Older revision		Revision as of 20:50, 22 August 2011
Line 1:		Line 1:
	== Overview ==		== Overview ==

	The eMail Server Relay Check ~~Tool~~ is a "swiss army knife" security ~~multi-~~tool designed for one-click testing of eMail servers for signs of misconfiguration. It is intended to be useful for ISPs performing security audits on their networks; and especially for server administrators who may be having ~~sporadic~~ problems delivering eMail to the Internet. If you have an eMail server facing the public Internet, there may be a ~~lot~~ of information publicly available if you know where to look; instead of having to visit multiple web pages, you will get a lot of information with one click using the eMail Server Relay Check Tool. Port 25 outbound must be open for this tool to work.		The eMail Server Relay Check is a "swiss army knife" security tool designed for one-click testing of eMail servers for signs of misconfiguration or abuse. It is intended to be useful for ISPs performing security audits on their networks; and especially for server administrators who may be having problems delivering eMail to the Internet. If you have an eMail server facing the public Internet, there may be a wealth of information publicly available if you know where to look; instead of having to visit multiple web pages, you will get a lot of information with one click using the eMail Server Relay Check Tool. Port 25 outbound must be open for this tool to work.

	The tool checks for the following:		The tool checks for the following:

Bwachunas: /* Usage */

2011-08-16T02:24:03Z

Usage

← Older revision		Revision as of 22:24, 15 August 2011
Line 62:		Line 62:
	* To see the location of the target server on a world map using NST's GeoIP functionality, click the '''Map It''' button the diagnostic output page. You must first [http://wiki.networksecuritytoolkit.org/nstwiki/index.php/HowTo_Setup_The_NST_System_To_Geolocate_Data set up GeoIP] on the NST server for this to work.		* To see the location of the target server on a world map using NST's GeoIP functionality, click the '''Map It''' button the diagnostic output page. You must first [http://wiki.networksecuritytoolkit.org/nstwiki/index.php/HowTo_Setup_The_NST_System_To_Geolocate_Data set up GeoIP] on the NST server for this to work.

	* If you choose to check for open relay plus portscan, the server will also be tested for public- facing open [http://en.wikipedia.org/wiki/NetBIOS_over_TCP/IP NETBIOS] ports. Use caution when selecting this option. Port scanning can be a precursor to attack and is forbidden by some ISP's. ''NETBIOS ports are used by Microsoft computers for printer and file-sharing on a Local Area Network (LAN) and should never be open facing the public Internet because of inherent security vulnerabilities. Unpatched XP and Windows 2000 machines are particularly vulnerable. NETBIOS ports, 139 and 445 are two of the most frequently targeted ports on the Internet by hackers, and having these ports open can lead to an attacker taking full control of the target machine.''		* If you choose to check for open relay plus portscan, the server will also be tested for public- facing open [http://en.wikipedia.org/wiki/NetBIOS_over_TCP/IP NETBIOS] ports. Use caution when selecting this option. Port scanning can be a precursor to attack and is forbidden by some ISP's. ''NETBIOS ports are used by Microsoft computers for printer and file-sharing on a Local Area Network (LAN) and should never be open facing the public Internet because of inherent security vulnerabilities. Unpatched XP and Windows 2000 machines are particularly vulnerable. NETBIOS ports 139 and 445 are two of the most frequently targeted ports on the Internet by hackers, and having these ports open can lead to an attacker taking full control of the target machine.''

	== Interpreting Output ==		== Interpreting Output ==

Bwachunas: /* Usage */

2011-08-16T02:22:22Z

Usage

← Older revision		Revision as of 22:22, 15 August 2011
Line 62:		Line 62:
	* To see the location of the target server on a world map using NST's GeoIP functionality, click the '''Map It''' button the diagnostic output page. You must first [http://wiki.networksecuritytoolkit.org/nstwiki/index.php/HowTo_Setup_The_NST_System_To_Geolocate_Data set up GeoIP] on the NST server for this to work.		* To see the location of the target server on a world map using NST's GeoIP functionality, click the '''Map It''' button the diagnostic output page. You must first [http://wiki.networksecuritytoolkit.org/nstwiki/index.php/HowTo_Setup_The_NST_System_To_Geolocate_Data set up GeoIP] on the NST server for this to work.

	* If you choose to check for open relay plus portscan, the server will also be tested for public- facing open [http://en.wikipedia.org/wiki/NetBIOS_over_TCP/IP NETBIOS] ports. Use caution when selecting this option. Port scanning can be a precursor to attack and is forbidden by some ISP's. ''NETBIOS ports are used by Microsoft computers for printer and file-sharing on a Local Area Network (LAN) and should never be open facing the public Internet because of inherent security vulnerabilities. Unpatched XP and Windows 2000 machines are particularly vulnerable. NETBIOS ports, ~~especially~~ 139 and 445, are the most frequently targeted ports on the Internet by hackers, and having these ports open can lead to an attacker taking full control of the target machine.''		* If you choose to check for open relay plus portscan, the server will also be tested for public- facing open [http://en.wikipedia.org/wiki/NetBIOS_over_TCP/IP NETBIOS] ports. Use caution when selecting this option. Port scanning can be a precursor to attack and is forbidden by some ISP's. ''NETBIOS ports are used by Microsoft computers for printer and file-sharing on a Local Area Network (LAN) and should never be open facing the public Internet because of inherent security vulnerabilities. Unpatched XP and Windows 2000 machines are particularly vulnerable. NETBIOS ports, 139 and 445 are two of the most frequently targeted ports on the Internet by hackers, and having these ports open can lead to an attacker taking full control of the target machine.''

	== Interpreting Output ==		== Interpreting Output ==

Bwachunas: /* Overview */

2011-08-16T02:16:50Z

Overview

← Older revision		Revision as of 22:16, 15 August 2011
Line 1:		Line 1:
	== Overview ==		== Overview ==

	The eMail Server Relay Check Tool is a "swiss army knife" security multi-tool designed for one-click testing of eMail servers for signs of misconfiguration. It is intended to be useful for ISPs performing security audits on their networks; and especially for ~~and~~ server administrators who may be having sporadic problems delivering eMail to the Internet. If you have an eMail server facing the Internet, there may be a lot of information publicly available if you know where to look; instead of having to visit multiple web pages, you will get a lot of information with one click using the eMail Server Relay Check Tool. Port 25 outbound must be open for this tool to work.		The eMail Server Relay Check Tool is a "swiss army knife" security multi-tool designed for one-click testing of eMail servers for signs of misconfiguration. It is intended to be useful for ISPs performing security audits on their networks; and especially for server administrators who may be having sporadic problems delivering eMail to the Internet. If you have an eMail server facing the public Internet, there may be a lot of information publicly available if you know where to look; instead of having to visit multiple web pages, you will get a lot of information with one click using the eMail Server Relay Check Tool. Port 25 outbound must be open for this tool to work.

	The tool checks for the following:		The tool checks for the following:

Bwachunas: /* Overview */

2011-08-16T02:13:50Z

Overview

← Older revision		Revision as of 22:13, 15 August 2011
Line 1:		Line 1:
	== Overview ==		== Overview ==

	The eMail Server Relay Check Tool is a "swiss army knife" security multi-tool designed for one-click testing of ~~email~~ servers for signs of misconfiguration. It is intended to be useful for ISPs performing security audits on their networks; and especially for and server administrators who may be having problems delivering ~~email~~ to the Internet. If you have an ~~email~~ server facing the Internet, there may be a lot of information publicly available if you know where to look; instead of having to visit multiple web pages, you will get a lot of information with one click using the eMail Server Relay Check Tool. Port 25 outbound must be open for this tool to work.		The eMail Server Relay Check Tool is a "swiss army knife" security multi-tool designed for one-click testing of eMail servers for signs of misconfiguration. It is intended to be useful for ISPs performing security audits on their networks; and especially for and server administrators who may be having sporadic problems delivering eMail to the Internet. If you have an eMail server facing the Internet, there may be a lot of information publicly available if you know where to look; instead of having to visit multiple web pages, you will get a lot of information with one click using the eMail Server Relay Check Tool. Port 25 outbound must be open for this tool to work.

	The tool checks for the following:		The tool checks for the following:

Bwachunas: /* Overview */

2011-08-16T02:12:41Z

Overview

← Older revision		Revision as of 22:12, 15 August 2011
Line 1:		Line 1:
	== Overview ==		== Overview ==

	The eMail Server Relay Check Tool is a "swiss army knife" security multi-tool designed for one-click testing of ~~public-facing~~ email servers for signs of misconfiguration. It is intended to be useful for ISPs performing security audits on their networks; and for and server administrators who may be having problems ~~sending or receiving from their servers~~. ~~Instead~~ of having to visit multiple web pages, you will get a lot of information with one click. Port 25 outbound must be open for this tool to work.		The eMail Server Relay Check Tool is a "swiss army knife" security multi-tool designed for one-click testing of email servers for signs of misconfiguration. It is intended to be useful for ISPs performing security audits on their networks; and especially for and server administrators who may be having problems delivering email to the Internet. If you have an email server facing the Internet, there may be a lot of information publicly available if you know where to look; instead of having to visit multiple web pages, you will get a lot of information with one click using the eMail Server Relay Check Tool. Port 25 outbound must be open for this tool to work.

	The tool checks for the following:		The tool checks for the following: