[15427] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: SMTP spoofing ?

daemon@ATHENA.MIT.EDU (Miquel van Smoorenburg)
Fri Feb 20 13:06:28 1998

To: nanog@merit.edu
From: miquels@cistron.nl (Miquel van Smoorenburg)
Date: 19 Feb 1998 19:52:16 +0100

In article <Pine.BSI.3.91.980219115057.13529A-100000@ivan.iecc.com>,
John R Levine  <johnl@iecc.com> wrote:
>Are there any routers currently available that can do port 25 spoofing for
>dialup users?  That is, when the user attempts to connect to port 25
>anywhere, he in fact connects to port 25 on your own SMTP server instead. 

Cisco? Just setup a routemap with an access list that matches TCP port
25, and sets next-hop to a box that supports `transparent proxying'.
Linux does, and AFAIK the *BSD's can do it as well.

Some squid users are doing this with port 80 to redirect HTTP traffic
through the caching proxy - there's some docs for it on http://squid.nlanr.net/
in the FAQ, read the section about "transparent proxying".

However I think that policy routing is still process switched, and as
such can use a lot of CPU on the router.

Mike.
-- 
 Miquel van Smoorenburg |  The dyslexic, agnostic, insomniac lay in his bed
    miquels@cistron.nl  |  awake all night wondering if there is a doG

home help back first fref pref prev next nref lref last post