smtp.clear.net.nz Open Relay!!!!

Forums › One NZ (including Farmside) › smtp.clear.net.nz Open Relay!!!!

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#215094 12-Jun-2017 13:06

Anyone out their that can confirm this for me - I've just send a bunch of emails via SMTP.CLEAR.NET.NZ from my gmail address to my office 365 account and vice versa using a simply SMTP client and SMTP.CLEAR.NET.NZ has accepted them all and delivered them even though I'm a 2 Degrees Broadband user - This either means they are open relay or at the very least allowing downstream providers (I believe Snap use to get bandwidth from Vodafone - Not sure if they still do) or NZ ips to Relay.

This is incredibly helpful to spammers wanting to Reach NZ users?????

Matt Beechey Mobius Network Solutions

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#1798447 12-Jun-2017 13:09

Just tried it from a client on Spark and they accepted and relayed that too - It would appear in their rush to "FIX" their email they have severely compromised their security - Anyone from Vodafone watching this forum!!!!

Matt Beechey Mobius Network Solutions

MikeHales

615 posts

Ultimate Geek
+1 received by user: 213

Trusted

#1798449 12-Jun-2017 13:11

Yes, will look into that

yitz

2238 posts

Uber Geek
+1 received by user: 594

#1798450 12-Jun-2017 13:11

There will be rate limits in place, not all that different from the old smtp.xtra.co.nz

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#1798451 12-Jun-2017 13:12

As I said - I used a simple SMTP mail client on my pc and then the same client on a customers server who is with spark and smtp.clear.net.nz accepted both emails without Authentication and without the domains being managed by Vodafone/Clear

Matt Beechey Mobius Network Solutions

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#1798452 12-Jun-2017 13:14

mobiusnz:

As I said - I used a simple SMTP mail client on my pc and then the same client on a customers server who is with spark and smtp.clear.net.nz accepted both emails without Authentication and without the domains being managed by Vodafone/Clear

The problem is an ISP's smtp server should only relay outbound email from a connection on their own network - smtp.clear.net.nz is accepting emails to be relayed outbound from other ISP networks - Yes rate limiting would stop me sending too much spam using the Open Relay but its still an Open Relay not a normal ISP Outbound Relay for their clients.

Matt Beechey Mobius Network Solutions

antoniosk

2382 posts

Uber Geek
+1 received by user: 742

ID Verified

Trusted

Lifetime subscriber

#1798456 12-Jun-2017 13:22

mobiusnz:

mobiusnz:

As I said - I used a simple SMTP mail client on my pc and then the same client on a customers server who is with spark and smtp.clear.net.nz accepted both emails without Authentication and without the domains being managed by Vodafone/Clear

The problem is an ISP's smtp server should only relay outbound email from a connection on their own network - smtp.clear.net.nz is accepting emails to be relayed outbound from other ISP networks - Yes rate limiting would stop me sending too much spam using the Open Relay but its still an Open Relay not a normal ISP Outbound Relay for their clients.

As I recall these controls were put in place years ago when I was in TCL.... wonder what's happened for the control to have been reset....

________

Antoniosk

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

timmmay

20858 posts

Uber Geek
+1 received by user: 5350

Trusted

Lifetime subscriber

#1798465 12-Jun-2017 13:34

MXToolbox says it's an open relay.

ISP provided email...

Coil

6614 posts

Uber Geek
+1 received by user: 2153
Inactive user

#1798475 12-Jun-2017 13:57

Pretty sure its been like this for a wee while.
As i recall telstra customers had no issues with SMTP when switching to Vodafone! (Back when the merger drama was going down with split billing systems etc etc)

mobiusnz

477 posts

Ultimate Geek
+1 received by user: 114

#1798547 12-Jun-2017 15:10

Looks like things are afoot - Now it just drops the connection before you get a chance to send any email - I guess thats valid enough - Just IP ban anyone not on network.

Matt Beechey Mobius Network Solutions