acceptable-security / greeleysmtpserver

The Greeley SMTP Server project (2017 edition)
0 stars 2 forks source link

AUTH LOGIN #1

Open michaelmaitland opened 7 years ago

michaelmaitland commented 7 years ago

we need to implement an authenticated login because most emails require authentication before we can send an email. Below is an example using telnet of me sending an email using an AUTH LOGIN. Note that i used "<--- comment here " to describe what was going on. I also removed the usernames and password and email addresses used for privacy reasons and replaced them with [description of what was replaced]

telnet smtp.verizon.net 25
Trying 64.12.91.200...
Connected to smtp-verizonmail.egslb.aol.com.
Escape character is '^]'.
220 vz-proxy-m003.mx.aol.com ESMTP ready
HELO smtp.verizon.net
250 vz-proxy-m003.mx.aol.com
AUTH LOGIN
334 VXNlcm5hbWU6 <——note that this base64 encoded string says username
[enter base64 encoded username]
334 UGFzc3dvcmQ6 <-—note that this base64 encoded string says password
[enter base 64 encoded password here]
235 2.0.0 OK
HELP <—- i entered in help to see some possible commands
214-2.3.0 Available commands:
214-2.3.0 
214-2.3.0 DATA, EHLO, EXPN, HELO, HELP, MAIL FROM
214-2.3.0 NOOP, QUIT, RCPT TO, RSET, SAML FROM
214-2.3.0 SEND FROM, SOML FROM, TICK, TURN
214-2.3.0 ATRN, VERB, VRFY, XADR, XSTA, XCIR
214-2.3.0 ETRN, XGEN, LHLO, AUTH
214 2.3.0
DATA <—- i typed data to send an email but i forgot to set who/from
503 5.5.0 No MAIL FROM command has been issued.
MAIL FROM: [enterusername]@verizon.net <—- i entered the email i logged in with
250 2.5.0 Address Ok.
RCPT TO: [enterusername]@verizon.net <— i entered the email i want to send to
250 2.1.5 [the username i put above]@verizon.net OK.
DATA
354 Enter mail, end with a single ".".
Hey michael its ur brother matthew
. <—- note the dot on its own line ends the data we want to send; email has sent
250 2.5.0 Ok.
QUIT  <—- close the connection with the server
221 2.3.0 Bye received. Goodbye.
Connection closed by foreign host.
Demotomb commented 7 years ago

What kind of authentication? Just username/email and password?

On Apr 2, 2017 at 8:17 PM, <Michael Maitlandmailto:notifications@github.com> wrote:

we need to implement an authenticated login because most emails require authentication before we can send an email. Below is an example using telnet of me sending an email using an AUTH LOGIN. Note that i used "<--- comment here " to describe what was going on. I also removed the usernames and password and email addresses used for privacy reasons and replaced them with [description of what was replaced]

telnet smtp.verizon.net 25 Trying 64.12.91.200... Connected to smtp-verizonmail.egslb.aol.com. Escape character is '^]'. 220 vz-proxy-m003.mx.aol.com ESMTP ready HELO smtp.verizon.net 250 vz-proxy-m003.mx.aol.com AUTH LOGIN 334 VXNlcm5hbWU6 <——note that this base64 encoded string says username [enter base64 encoded username] 334 UGFzc3dvcmQ6 <-—note that this base64 encoded string says password [enter base 64 encoded password here] 235 2.0.0 OK HELP <—- i entered in help to see some possible commands 214-2.3.0 Available commands: 214-2.3.0 214-2.3.0 DATA, EHLO, EXPN, HELO, HELP, MAIL FROM 214-2.3.0 NOOP, QUIT, RCPT TO, RSET, SAML FROM 214-2.3.0 SEND FROM, SOML FROM, TICK, TURN 214-2.3.0 ATRN, VERB, VRFY, XADR, XSTA, XCIR 214-2.3.0 ETRN, XGEN, LHLO, AUTH 214 2.3.0 DATA <—- i typed data to send an email but i forgot to set who/from 503 5.5.0 No MAIL FROM command has been issued. MAIL FROM: [enterusername]@verizon.net <—- i entered the email i logged in with 250 2.5.0 Address Ok. RCPT TO: [enterusername]@verizon.net <— i entered the email i want to send to 250 2.1.5 [the username i put above]@verizon.net OK. DATA 354 Enter mail, end with a single ".". Hey michael its ur brother matthew . <—- note the dot on its own line ends the data we want to send; email has sent 250 2.5.0 Ok. QUIT <—- close the connection with the server 221 2.3.0 Bye received. Goodbye. Connection closed by foreign host.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://github.com/block8437/greeleysmtpserver/issues/1, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AOJjKVnm9tA55MJw_VNNQpGC8OWUamcHks5rsDqHgaJpZM4Mw_HE.

michaelmaitland commented 7 years ago

yea just username and password. Most SMTP these days won't work unless we have a login and password even though old SMTP allowed it