Domino and Dealing with SMTP Email

This article will be of interest to the following people:
1. You have a Domino SMTP MTA which is pre-release 6 (or Release 6 but you haven’t configured it properly!)
2. You do not use a mail relay which checks the addresses for validity before accepting the messages

Again as per the last post this problem is several years old but I still see it in enterprise environments today.

What is the problem?
Well what should happen if I am an email server I have an email for companyb.com. I contact companyb.com and tell their gateway in a handshake who I have messages for. They reply with one message for any addresses that are invalid. All handled at a protocol level without the message even entering companyb.com’s domain.

So how did/does Domino work by default. Well it accepts the message and then does an address lookup generating a non delivery report for each incorrect address.

So What?
Well lets say I spoofed the sender address to be managingdirector@companyc.com. Company C use Domino but don’t run the proper name resolution at SMTP protocol levels. I then send a message from managingdirector@companyc.com with a 10 MB attachment. I send if to wrongaddress1@companyc.com to wrongaddress1000@companyc.com. I do this 100 times because managing director has just sacked me and I’m upset.

What will happen…..well Domino will try and generate 100,000 emails with a 10MB attachment and try and send them internally to managingdirector@companyc.com because it thinks he has sent 100,000 incorrectly addressed messages.

how do I fix it
Well take IBM’s advice…….article 1 and article 2

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s