Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




92 posts

Master Geek
+1 received by user: 12


Topic # 215094 12-Jun-2017 13:06
Send private message quote this post

Anyone out their that can confirm this for me - I've just send a bunch of emails via SMTP.CLEAR.NET.NZ from my gmail address to my office 365 account and vice versa using a simply SMTP client and SMTP.CLEAR.NET.NZ has accepted them all and delivered them even though I'm a 2 Degrees Broadband user - This either means they are open relay or at the very least allowing downstream providers (I believe Snap use to get bandwidth from Vodafone - Not sure if they still do) or NZ ips to Relay.

 

This is incredibly helpful to spammers wanting to Reach NZ users?????

 

 


Create new topic


92 posts

Master Geek
+1 received by user: 12


  Reply # 1798447 12-Jun-2017 13:09
One person supports this post
Send private message quote this post

Just tried it from a client on Spark and they accepted and relayed that too - It would appear in their rush to "FIX" their email they have severely compromised their security - Anyone from Vodafone watching this forum!!!!

 

 


326 posts

Ultimate Geek
+1 received by user: 138

Trusted
Vodafone NZ

  Reply # 1798449 12-Jun-2017 13:11
Send private message quote this post

Yes, will look into that




Channel Manager, Help & Support @ Vodafone NZ


 
 
 
 


793 posts

Ultimate Geek
+1 received by user: 156


  Reply # 1798450 12-Jun-2017 13:11
Send private message quote this post

There will be rate limits in place, not all that different from the old smtp.xtra.co.nz



92 posts

Master Geek
+1 received by user: 12


  Reply # 1798451 12-Jun-2017 13:12
Send private message quote this post

As I said - I used a simple SMTP mail client on my pc and then the same client on a customers server who is with spark and smtp.clear.net.nz accepted both emails without Authentication and without the domains being managed by Vodafone/Clear




92 posts

Master Geek
+1 received by user: 12


  Reply # 1798452 12-Jun-2017 13:14
Send private message quote this post

mobiusnz:

 

As I said - I used a simple SMTP mail client on my pc and then the same client on a customers server who is with spark and smtp.clear.net.nz accepted both emails without Authentication and without the domains being managed by Vodafone/Clear

 

 

The problem is an ISP's smtp server should only relay outbound email from a connection on their own network - smtp.clear.net.nz is accepting emails to be relayed outbound from other ISP networks - Yes rate limiting would stop me sending too much spam using the Open Relay but its still an Open Relay not a normal ISP Outbound Relay for their clients.

 

 


1407 posts

Uber Geek
+1 received by user: 229

Trusted
Subscriber

  Reply # 1798456 12-Jun-2017 13:22
Send private message quote this post

mobiusnz:

 

mobiusnz:

 

As I said - I used a simple SMTP mail client on my pc and then the same client on a customers server who is with spark and smtp.clear.net.nz accepted both emails without Authentication and without the domains being managed by Vodafone/Clear

 

 

The problem is an ISP's smtp server should only relay outbound email from a connection on their own network - smtp.clear.net.nz is accepting emails to be relayed outbound from other ISP networks - Yes rate limiting would stop me sending too much spam using the Open Relay but its still an Open Relay not a normal ISP Outbound Relay for their clients.

 

 

 

 

As I recall these controls were put in place years ago when I was in TCL.... wonder what's happened for the control to have been reset....





________
AK

12600 posts

Uber Geek
+1 received by user: 2029

Trusted
Subscriber

  Reply # 1798465 12-Jun-2017 13:34
Send private message quote this post

MXToolbox says it's an open relay.

 

ISP provided email...





AWS Certified Solution Architect Professional, Sysop Administrator Associate, and Developer Associate
TOGAF certified enterprise architect
Professional photographer


4744 posts

Uber Geek
+1 received by user: 1316

Trusted

  Reply # 1798475 12-Jun-2017 13:57
Send private message quote this post

Pretty sure its been like this for a wee while.
As i recall telstra customers had no issues with SMTP when switching to Vodafone! (Back when the merger drama was going down with split billing systems etc etc)








92 posts

Master Geek
+1 received by user: 12


  Reply # 1798547 12-Jun-2017 15:10
Send private message quote this post

Looks like things are afoot - Now it just drops the connection before you get a chance to send any email - I guess thats valid enough - Just IP ban anyone not on network.


Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Behind Spark’s slow-burn 4.5G plan
Posted 26-Jun-2017 16:23


Red Hat unveils production-ready open source hyperconverged infrastructure
Posted 23-Jun-2017 22:10


Whatever ailed Vodafone broadband … seems to be fixed
Posted 23-Jun-2017 14:10


VMware NSX Meets Stringent Government Security Standards with Common Criteria Certification
Posted 22-Jun-2017 19:05


Brother launches next-generation colour laser printers and all-in- ones for business
Posted 22-Jun-2017 18:56


Intel and IOC announce partnership
Posted 22-Jun-2017 18:50


Samsung Galaxy Tab S3: Best Android tablet
Posted 21-Jun-2017 12:05


Wellington-based company helping secure Microsoft browsers
Posted 20-Jun-2017 20:51


Endace delivers high performance with new 1/10/40 Gbps packet capture card
Posted 20-Jun-2017 20:50


You can now integrate SMX security into Microsoft Office 365, Google and other cloud email platforms
Posted 20-Jun-2017 20:47


Ravensdown launches new decision-making tool HawkEye
Posted 19-Jun-2017 15:38


Spark planning to take on direct management of all consumer stores
Posted 19-Jun-2017 10:03


Qrious acquires Ubiquity
Posted 14-Jun-2017 12:21


Spark New Zealand prepares for 5G with Nokia
Posted 14-Jun-2017 12:16


The future-proof 10.5-inch iPad Pro
Posted 13-Jun-2017 18:16



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.