A word of warning to previous myrealbox.com users...

Hi.

I hope nobody of you ever used myrealbox.com for anything remotely
serious, and are in risk of receiving confidential mail to that no
longer existing service.

Because Messaging Architects is running a mailserver again for it, which
is accepting *all* mail sent to any myrealbox.com address.

I suggest that if you may be affected by this, you contact Messaging
Architects, and complain loudly about that privacy breach.

CU,
--
Massimo Rosen
Novell Knowledge Partner
No emails please!
http://www.cfc-it.de
Parents
  • Hi Massimo,

    where did you see that they have this erver running?

    Lance



    On 07/09/2011 00:15, Massimo Rosen wrote:
    > Hi.
    >
    > I hope nobody of you ever used myrealbox.com for anything remotely
    > serious, and are in risk of receiving confidential mail to that no
    > longer existing service.
    >
    > Because Messaging Architects is running a mailserver again for it, which
    > is accepting *all* mail sent to any myrealbox.com address.
    >
    > I suggest that if you may be affected by this, you contact Messaging
    > Architects, and complain loudly about that privacy breach.
    >
    > CU,


  • On 07.09.2011 09:46, Lance Haig wrote:
    > Hi Massimo,
    >
    > where did you see that they have this erver running?
    >
    > Lance


    By pure coincidence. I replied to a message sent to me by email, which
    was also CC'd to a myrealbox.com address. I noticed it the moment I hit
    "send", and expected a bounce, but instead the message was transferred
    just fine. I then checked.

    CU,
    --
    Massimo Rosen
    Novell Knowledge Partner
    No emails please!
    http://www.cfc-it.de
  • Massimo Rosen <mrosenNO@SPAMcfc-it.de> wrote in news:cvF9q.2808$8W7.1579
    @kovat.provo.novell.com:

    > On 07.09.2011 09:46, Lance Haig wrote:
    >> Hi Massimo,
    >>
    >> where did you see that they have this erver running?
    >>
    >> Lance

    >
    > By pure coincidence. I replied to a message sent to me by email, which
    > was also CC'd to a myrealbox.com address. I noticed it the moment I hit
    > "send", and expected a bounce, but instead the message was transferred
    > just fine. I then checked.
    >
    > CU,


    I just tried to telnet to myrealbox.com 25 and that didn't work. I thought
    I had moved all my stuff off my account, but I did find one website that
    was still using it that I wanted to keep going. I followed their change
    email process for the site and of course it wants to send an are you sure
    to the MRB - GRRR, now I am locked out of that forum and waiting for their
    admin to fix me up...

    --
    Ciao, Dave
  • Hi.

    On 11.09.2011 10:04, Dave Taylor wrote:
    >
    > I just tried to telnet to myrealbox.com 25 and that didn't work.


    Why would it? The MX record, e.g mailserver for myrealbox.com is
    "replay.myrealbox.com", and a telnet replay.myrealbox.com 25 produces

    220 localhost SMTP Replay Server

    And that server accepts each and every mail sent to any myrealbox.com
    address.

    CU,
    --
    Massimo Rosen
    Novell Knowledge Partner
    No emails please!
    http://www.cfc-it.de
  • * Dave Taylor (Sun, 11 Sep 2011 08:04:52 GMT)
    > I just tried to telnet to myrealbox.com 25 and that didn't work.


    ....try the correct one...

    > nslookup -q=mx myrealbox.com

    Server: google-public-dns-a.google.com
    Address: 8.8.8.8

    Non-authoritative answer:
    myrealbox.com MX preference = 10, mail exchanger =
    replay.myrealbox.com

    > nmap -p 25 replay.myrealbox.com


    Starting Nmap 5.51 ( http://nmap.org ) at 2011-09-11 11:22 Central
    Europe Daylight Time

    Nmap scan report for replay.myrealbox.com (68.67.42.211)
    Host is up (0.14s latency).
    rDNS record for 68.67.42.211: IP-68-67-42-211.static.fibrenoire.ca
    PORT STATE SERVICE
    25/tcp open smtp

    Nmap done: 1 IP address (1 host up) scanned in 1.12 seconds
Reply
  • * Dave Taylor (Sun, 11 Sep 2011 08:04:52 GMT)
    > I just tried to telnet to myrealbox.com 25 and that didn't work.


    ....try the correct one...

    > nslookup -q=mx myrealbox.com

    Server: google-public-dns-a.google.com
    Address: 8.8.8.8

    Non-authoritative answer:
    myrealbox.com MX preference = 10, mail exchanger =
    replay.myrealbox.com

    > nmap -p 25 replay.myrealbox.com


    Starting Nmap 5.51 ( http://nmap.org ) at 2011-09-11 11:22 Central
    Europe Daylight Time

    Nmap scan report for replay.myrealbox.com (68.67.42.211)
    Host is up (0.14s latency).
    rDNS record for 68.67.42.211: IP-68-67-42-211.static.fibrenoire.ca
    PORT STATE SERVICE
    25/tcp open smtp

    Nmap done: 1 IP address (1 host up) scanned in 1.12 seconds
Children
  • Thorsten Kampe <thorsten@thorstenkampe.de> wrote in
    news:MPG.28d69ddcdae0b8c98986f@support-forums.novell.com:

    > * Dave Taylor (Sun, 11 Sep 2011 08:04:52 GMT)
    >> I just tried to telnet to myrealbox.com 25 and that didn't work.

    >
    > ...try the correct one...
    >
    >> nslookup -q=mx myrealbox.com

    > Server: google-public-dns-a.google.com
    > Address: 8.8.8.8
    >
    > Non-authoritative answer:
    > myrealbox.com MX preference = 10, mail exchanger =
    > replay.myrealbox.com
    >
    >> nmap -p 25 replay.myrealbox.com

    >
    > Starting Nmap 5.51 ( http://nmap.org ) at 2011-09-11 11:22 Central
    > Europe Daylight Time
    >
    > Nmap scan report for replay.myrealbox.com (68.67.42.211)
    > Host is up (0.14s latency).
    > rDNS record for 68.67.42.211: IP-68-67-42-211.static.fibrenoire.ca
    > PORT STATE SERVICE
    > 25/tcp open smtp
    >
    > Nmap done: 1 IP address (1 host up) scanned in 1.12 seconds
    >


    Thanks for doing it correctly :(

    --
    Ciao, Dave
  • Thorsten Kampe <thorsten@thorstenkampe.de> wrote in
    news:MPG.28d69ddcdae0b8c98986f@support-forums.novell.com:

    > * Dave Taylor (Sun, 11 Sep 2011 08:04:52 GMT)
    >> I just tried to telnet to myrealbox.com 25 and that didn't work.

    >
    > ...try the correct one...
    >
    >> nslookup -q=mx myrealbox.com

    > Server: google-public-dns-a.google.com
    > Address: 8.8.8.8
    >
    > Non-authoritative answer:
    > myrealbox.com MX preference = 10, mail exchanger =
    > replay.myrealbox.com
    >
    >> nmap -p 25 replay.myrealbox.com

    >
    > Starting Nmap 5.51 ( http://nmap.org ) at 2011-09-11 11:22 Central
    > Europe Daylight Time
    >
    > Nmap scan report for replay.myrealbox.com (68.67.42.211)
    > Host is up (0.14s latency).
    > rDNS record for 68.67.42.211: IP-68-67-42-211.static.fibrenoire.ca
    > PORT STATE SERVICE
    > 25/tcp open smtp
    >
    > Nmap done: 1 IP address (1 host up) scanned in 1.12 seconds


    Thanks for doing it correctly :(

    --
    Ciao, Dave