Subject: [BEHAVE] scrambling ports - breaking SMTP and IMAP

From: Peter Dambier <[email-masked]>
Date: Wed, 26 Nov 2008 21:16:05 +0100

Hello,

I am just thinking of how exim4 (sometimes) is working.

You have authenticated to IMAP.

Now you want to send outside via SMTP.

exim compares your IPv4 address with IMAP.
If you are logged in, ok.

This wont work with port scrambling resulting in a different IPv4.

Should not necessarily be a problem except when you
replace IPv4 with IPv6.

Same goes for SMTP querying finger and ident.

There are still some people running the portmapper
and things like NIS, rsh, rexec, rlogin, nfs,
not to mention telnet, ftp and tftp.

After all NAT66 could be a bridge between two safe environments.

That is why port scrambling makes my hears stand on their ends.

Maybe I have missed something.

Kind regards
Peter

-- 
Peter and Karin Dambier
Cesidian Root - Radice Cesidiana
Rimbacher Strasse 16
D-69509 Moerlenbach-Bonsweiher
+49(6209)795-816 (Telekom)
+49(6252)750-308 (VoIP: sipgate.de)
mail: [email-masked]
http://iason.site.voila.fr/
https://sourceforge.net/projects/iason/
http://www.cesidianroot.net/
_______________________________________________
Behave mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/behave