Hello Gary,

Wednesday, May 16, 2007, 11:51:06 PM, you wrote:

V>> You don't. You will authentificate to your real server. But as my
V>> router/imap server will be transparent you will never know this.

V>> For example on Linux it is done like this:
V>> iptables -A PREROUTING -d <myserveripfromvictimside> -i eth0 -p tcp -m tcp 
--dport 993 -j RETURN
V>> iptables -A PREROUTING -s ! <myserveripfromvictimside> -i eth0 -p tcp -m
V>> tcp --dport 993 -j DNAT --to-destination <myserveripfromvictimside>:993

> Yes, this can easily be done using Netfilter. There are similar capabilities
> in Unix (FreeBSD) packet routing. However, it is hardly worth the effort
> Again this is a simple POP/IMAP server, not e-commerce.

You'll be suprised how many people send their banking passwords,
social numbers and credit card information through email :) And nobody
says that attacker will be interested in your inbox exclusively.
Usually they gather thousands of passwords.

Ok time to sleep. Good night.

-- 
Best regards,
 Vilius


________________________________________________________
 Current beta is 3.99.06 | 'Using TBBETA' information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to