eScan Blog
eScan Website
eScan Forum
eScan Feeds From eScan Wiki
Contents |
MailScan version 6.x
ESAT -Email Server Audit Tool
About E.S.A.T.
E.S.A.T. will assist administrators in:
- Troubleshooting , Configuration Verification.
- Mail Server Deployment vis’a’vis the configuration of the mail server.
- Securing the mail server deployment.
Tests of E.S.A.T.
- Open Relay Test
- Email Spoof Test
- Sender Domain Verification Test
- Auth Test
- Auth Spoof Test
- Auth Relay Test
- DHA and DOS
Execute esat.exe file from %Program Files%\MailScan\
The initial window will display local system hostname and IP address. Click on Yes to proceed with the email server audit activity.
This is the initial screen for the E.S.A.T.. Fake email id is the only field which cannot be changed.
Selecting Test Auth, will conduct Auth related tests as well as Non-auth i.e. those tests defined for MX servers, based on user selection i.e. Test Single IP or test from external, the tests will be for individual IPs or for the MX records.
External IP is always displayed for your convenience.
TESTING MX RECORDS
All the published MX records will be tested. Prior to this test ensure that your system is allowed to connected to Port 25. Refer to the Network Diagram for the deployment of the test scenario.
Administrator may also deploy E.S.A.T. on the outgoing mail server and start the audit of the domain which is foreign to his/her organization. Eg. My local domain is mwti.net but whenever I send a mail to yahoo.com its getting rejected. Administrator may deploy E.S.A.T. directly on the Outgoing Mail server or use a system which has the same Outgoing Internet IP as that of the outgoing mail server.
In case, your outgoing mail server‘s IP is blacklisted then it will be reflected in the Audit Report.
If your outgoing IP is different then RBL Listing is effective for this particular IP.
This test can be conducted by end-users who often complain that they are unable to send mails to their own mail server.
TESTING A SINGLE IP
As mentioned earlier, this will test a single IP. The IP can be a LAN IP or a WAN IP or out in the wild Internet based IP.
When the IP defined belongs to LAN/WAN, this simply means that as an administrator you are testing the effectiveness of your mail servers from the user point of view and considering most mail server allow relay etc etc for Internal Lan / WAN IPs , this will help you in understanding your Mail server Configuration.
Secondly, use this test from all possible Gateways, ie. Prior to each test configure your system to be a part of the networks whose gateway-email server relationship needs to be tested.
RESULTS
Once all the audit tests are completed, it will give confirmation message and the logs will be saved in the mentioned location.
