Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




147 posts

Master Geek


# 215094 12-Jun-2017 13:06
Send private message

Anyone out their that can confirm this for me - I've just send a bunch of emails via SMTP.CLEAR.NET.NZ from my gmail address to my office 365 account and vice versa using a simply SMTP client and SMTP.CLEAR.NET.NZ has accepted them all and delivered them even though I'm a 2 Degrees Broadband user - This either means they are open relay or at the very least allowing downstream providers (I believe Snap use to get bandwidth from Vodafone - Not sure if they still do) or NZ ips to Relay.

 

This is incredibly helpful to spammers wanting to Reach NZ users?????

 

 


Create new topic


147 posts

Master Geek


  # 1798447 12-Jun-2017 13:09
One person supports this post
Send private message

Just tried it from a client on Spark and they accepted and relayed that too - It would appear in their rush to "FIX" their email they have severely compromised their security - Anyone from Vodafone watching this forum!!!!

 

 


615 posts

Ultimate Geek

Trusted
Vodafone NZ

  # 1798449 12-Jun-2017 13:11
Send private message

Yes, will look into that




Channel Manager, Help & Support @ Vodafone NZ


 
 
 
 


1374 posts

Uber Geek


  # 1798450 12-Jun-2017 13:11
Send private message

There will be rate limits in place, not all that different from the old smtp.xtra.co.nz



147 posts

Master Geek


  # 1798451 12-Jun-2017 13:12
Send private message

As I said - I used a simple SMTP mail client on my pc and then the same client on a customers server who is with spark and smtp.clear.net.nz accepted both emails without Authentication and without the domains being managed by Vodafone/Clear




147 posts

Master Geek


  # 1798452 12-Jun-2017 13:14
Send private message

mobiusnz:

 

As I said - I used a simple SMTP mail client on my pc and then the same client on a customers server who is with spark and smtp.clear.net.nz accepted both emails without Authentication and without the domains being managed by Vodafone/Clear

 

 

The problem is an ISP's smtp server should only relay outbound email from a connection on their own network - smtp.clear.net.nz is accepting emails to be relayed outbound from other ISP networks - Yes rate limiting would stop me sending too much spam using the Open Relay but its still an Open Relay not a normal ISP Outbound Relay for their clients.

 

 


1924 posts

Uber Geek

Trusted
Subscriber

  # 1798456 12-Jun-2017 13:22
Send private message

mobiusnz:

 

mobiusnz:

 

As I said - I used a simple SMTP mail client on my pc and then the same client on a customers server who is with spark and smtp.clear.net.nz accepted both emails without Authentication and without the domains being managed by Vodafone/Clear

 

 

The problem is an ISP's smtp server should only relay outbound email from a connection on their own network - smtp.clear.net.nz is accepting emails to be relayed outbound from other ISP networks - Yes rate limiting would stop me sending too much spam using the Open Relay but its still an Open Relay not a normal ISP Outbound Relay for their clients.

 

 

 

 

As I recall these controls were put in place years ago when I was in TCL.... wonder what's happened for the control to have been reset....





________

 

Antonios K

 

Click to see full size


14971 posts

Uber Geek

Trusted
Subscriber

  # 1798465 12-Jun-2017 13:34
Send private message

MXToolbox says it's an open relay.

 

ISP provided email...


 
 
 
 


6615 posts

Uber Geek
Inactive user


  # 1798475 12-Jun-2017 13:57
Send private message

Pretty sure its been like this for a wee while.
As i recall telstra customers had no issues with SMTP when switching to Vodafone! (Back when the merger drama was going down with split billing systems etc etc)




147 posts

Master Geek


  # 1798547 12-Jun-2017 15:10
Send private message

Looks like things are afoot - Now it just drops the connection before you get a chance to send any email - I guess thats valid enough - Just IP ban anyone not on network.


Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Kiwi workers still falling victim to old cyber tricks
Posted 12-Aug-2019 20:47


Lightning Lab GovTech launches 2019 programme
Posted 12-Aug-2019 20:41


Epson launches portable laser projector
Posted 12-Aug-2019 20:27


Huawei launches new distributed HarmonyOS
Posted 12-Aug-2019 20:20


Lenovo introduces single-socket servers for edge and data-intensive workloads
Posted 9-Aug-2019 21:26


The Document Foundation announces LibreOffice 6.3
Posted 9-Aug-2019 16:57


Symantec sell enterprise security assets for US$ 10.7 billion to Broadcom
Posted 9-Aug-2019 16:43


Artificial tongue can distinguish whisky and identify counterfeits
Posted 8-Aug-2019 20:20


Toyota and Preferred Networks to develop service robots
Posted 8-Aug-2019 20:11


Vodafone introduces new Vodafone TV device
Posted 7-Aug-2019 17:16


Intel announces next-generation Intel Xeon Scalable processors with up to 56 cores
Posted 7-Aug-2019 15:41


Nokia 2.2 released in New Zealand
Posted 5-Aug-2019 19:38


2degrees celebrating ten years
Posted 5-Aug-2019 05:00


Sure Petcare launches SureFeed microchip pet feeder
Posted 2-Aug-2019 17:00


Symantec Threat Intelligence: revival and rise of email extortion scams
Posted 2-Aug-2019 16:55



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.