http://Linux-Sec.net Hardening-Tightening Security_Policy Hardening-HOWTO Linux Distros Distro Patches Kernel-Patches Dedicated Servers Firewalls DNS Servers Mail Servers Web Servers Turn-Off Daemons Tighten Inetd Services Top-10 Vulnerabilities Top-7 Security Mistakes Top-10 Vulnerabilities Top-20 Most Critical Vulnerability Top-10 Virus Scans/Attacks Stats Top-10 Attacks Hacked Servers One Minute Audits OpenPorts Audit AntiVirus - AntiSpam Anti-Spam Anti-Virus spam.wav Wireless [In]Security Sniffers Security Tools SSH_SSL Firewalls MailServer FileSystem VPN Port Scan Detectors IDS Tools LogFile Analysis Ethernet Monitoring Server Monitoring Tracking & Forensics Hackers Tools Audit Tools Port Scanners Hacking Tools DDOS Tools Sniffer Tools Spoof Tools Exploits & Vulnerbilities Wireless Wireless [In]Security Misc Statistics Linux/BSD Distros Links,Articles,WatchDogs Security Mailing Lists/FAQs Liability Insurance 1U Rackmount Chassis Custom-Chassis.com Linux-1U.net 1U-ITX.net ITX-Blades.net Small PC cases Mini-Box.net Wrap-Box.net Wrap-OS.net Wan-Sim.net Linux-Consulting.com Linux-CAE.net Linux-Sec.net Linux-Boot.net Linux-Backup.net Linux-Wireless.org Linux-Office.net Linux-Video.net Linux-VOIP.net Linux-Jobs.net Linux-Diff.net 1U-Raid5.net Linux-Howto.net Spam Reporting Free Linux CDs ISO9660.org Distro-CD.org Patch-CD.org Contact Linux is a registered trademark of Linus Torvalds More Linux Legalese

Linux-Sec.net/Mail Secure Mail Server Secure Pop3 Mail Servers MTA Secure-MTA Wireless-MTA WebMail Servers AntiVirus MIME Detach AntiSpam Sendmail Sendmail Install-HOWTO Example Sendmail Config FIles OpenRelay RBLs Filters RFCs Laws Mail Headers Mail Log Analyzers Monty-Python Songs Sniffing httpd Sniffable Webmail Services Linux-Sec.net/Sniff.httpd/#Sniffable Sniffable Webmail services Linux-Sec.net/Sniff.httpd/#SecureWebMail non-Sniffable Webmail services Govermental, Military, Medical, Insurance, Educational, ISPs, etc "should be" non-sniffable websites WebMail Servers Linux-Sec.net/Mail/WebMail Secure Web-Based Email ( WebMail ) Services these webmail services run encrypted httpd ( https: ) which are NOT human readable you can use the Encrypted-Email.net html sniffing demo to see that your login/passwd and email contents are encrypted ( scrambled/jibberish ) NOTE, that if apache httpd is configured properly, it will switch to https automatically Well Known webmail services mail.google.com aka gmail.com aka https://www.google.com/accounts/ServiceLogin mail.yahoo.com aka https://login.yahoo.com/config/login_verify2 mail.aol.com aka https://my.screenname.aol.com comcast.net webmail.att.net webmail.bellaliant.net insightbb.com webmail.comcast.com webmail.cox.net www.coxmail.com has https webmail.earthlink.net also has https://webmail.earthlink.net login.frontier.com GreatBasin.net webmail.juno.com also has https://webmail.juno.com webmail.kinetic.more.net webmail.pair.com has squirrel, roundcube rcn.com has https webmail.roadrunner.com webmail.shaw.ca webmail.sonic.net webmail.sunflower.com Well Known webmail services from major corps SecureServer.net aka godaddy.com apps.rackspace.com also has https://apps.rackspace.com signup.mail.com webmail.eds.com ibm.com webmail.ema.kpmg.com mail.us.aflac.com insurance webmail.suntrust.com webmail.bjc.org health care webmail.pmh.org health care webmail.merck.com health care webmail.medstar.net health care webmail.mentor.com securenym.net Well Known webmail services for military and govt webmail.us.army.mil webmail.nps.edu webmail.nasa.gov webmail.hhs.gov dcwebmail3.epa.gov mail.nems.noaa.gov webmail.alaska.gov University webmail services calmail.berkeley.edu squirrel and/or roundcube webmail.caltech.edu webmail.mit.edu webmail.stanford.edu webmail.ucr.edu email.usc.edu webmail.uci.edu acs-webmail.ucsd.edu webmail.sfsu.edu webmail.csulb.edu csusm.edu owa.scripps.edu also has https webmail.scripps.edu webmail.uams.edu medical webmail.bsu.edu mail.cwru.edu webmail.cca.edu webmail.uccs.edu webmail.dartmouth.edu webmail.desales.edu mail.du.edu webmail.drury.edu webmail.service.emory.edu webmail.ufl.edu webmail.fsu.edu webmail.fdu.edu webmail.barry.edu mail.med.miami.edu medical webaccess.gsu.edu webmail.fas.harvard.edu mail.hawaii.edu webmail.villanova.edu webmail.iu.edu webmail.uic.edu websec.it.siu.edu webmail.siue.edu signin.k-state.edu webmail.kctcs.edu mail.wku.edu webmail.lafayette.edu webmail.lclark.edu mail.bc.edu www.bu.edu/webmail webmail.mines.edu mail.umich.edu webmail.wmich.edu umn.edu webmail.missouri.edu webmail.montclair.edu webmail.mercer.edu webmail.unm.edu webmail.mtsu.edu webmail.usm.edu webmail.njit.edu webmail.columbia.edu webmail.cornell.edu webmail.ithaca.edu webmail.ic.sunysb.edu has https webmail.hunter.cuny.edu webmail.newschool.edu mail.troy.edu mail.acast.nova.edu webmail.ncsu.edu www.mail.duke.edu webmail.ndsu.nodak.edu webmail.newark.rutgers.edu webmail.njit.edu webmail.unc.edu northwestern.edu login.webmail.ohio.edu webmail.osu.edu upenn.edu webmail.hchd.tmc.edu medical webmail.oregonstate.edu webmail.pdx.edu princeton.edu also has https webmail.psu.edu webmail.gcc.edu webmail.purdue.edu webmail.rpi.edu webmail.uri.edu webmail.rice.edu webmail.smu.edu webmail.utexas.edu webmail.utmb.edu www.uthouston.edu health webmail.tufts.edu ent.tulane.edu webmail.vt.edu www.mail.virginia.edu webmail.nsu.edu squirrel.wfu.edu webmail.williams.edu wiscmail.wisc.edu www.mail.yale.edu webmail.k12.sd.us webmail.schools.mybps.org webmail.unicef.org webmail.un.org Less Known webmail services webmail.bravehost.com cadillac.net also has https://mail.cadillac.net webmail.comporium.net webmail.ec.europa.eu my.gci.net hostway.com idzap.com jumbleme.com luxsci.com also has https://luxsci.com secure.mawebcenters.com webmail.opentransfer.com webmail.osiemail.com perfora.net webmail.pearson.com mail.hover.com mail.rayservers.com webmail.scif.com ms owa siteground.com slashmail.org slashmail.org/compare webmail.telia.com webmail.telus.net webmail.twotrees.com webmail.westhost.com Sniffable WebMail Services these webmail services run un-encrypted httpd which are sniffable do NOT use these sniffable webmail services if you do NOT want to be sniffed you can use the Encrypted-Email.net html sniffing demo to see your clear text login and passwords and email data sent in un-encrypted html format you can use a fake login and fake passwd to see that your login/pwd was sniffed Human readable un-encrypted well known webmail services Excite.com has "secure mode" version at https://registration.excite.com Hotmail.com aka live.com mail.lycos.com Mail.Yahoo.com Major ISPs running insecure login services sniffing this traffic is an ez way to hijack users domains and onfile credit card info Fedex.com GoDaddy.com ISPs running insecure webmail services webmail.bellsouth.net also goes to att.net webmail.centurytel.net has https www.chariot.net.au newmail.core.com webmail.covad.net webmail.fuse.net home.myhughesnet.com www.aroundhawaii.com webmail.localnet.com webmail.netzero.net has https one.com/en/webmail webmail.onecommunications.net has https www.powweb.com/mail www.socket.net/webmail webmail.verizon.net webmail.vsnl.com webmail.tm.net.my Government & Universities running insecure webmail services webmail.uaa.alaska.edu webmail.uaf.edu webmail.email.ecok.edu webmail.mizzou.edu messy insecure login process access.k12.wv.us:1081 note port#, has https webmail.olemiss.edu note port#, has https webmail.cofc.edu has https mirapoint.jcu.edu usnaemail.usna.edu mirapoint webmail.firn.edu has https webmail.cs.yale.edu has https webmail.med.yale.edu has https ace.alabama.gov mail.vfwwebmail.com Human readable un-encrypted less known webmail services ( me too's ) members.accountsupport.com/mail has http advancedwebmail.com www.alphawebmail.com althepal.com theaardvark.com has https://email.theaardvark.com ausi.com BlueBottle.com BlueTie.com has (useless?) secure option webmail.brinkster.com uses zimbra webmail.cebridge.net has https ClientLook.com webmail.comfsm.fm ComputerMail.net cwazy.net driveHQ.com Everymail.com webmail.emailsrvr.com has https www.emwebmail.com has https ezilon.com FastMail.fm has (useless?) secure option FutureQuest.com has secure https://questmail.futurequest.net gawab.com gmx.com 13 million users www.hdwebmail.com has https webmail.huawei.com has https www.ipower.com has https webmail.kw.com has https webmail.knology.net has https www.linkuwebmail.com Linux-Mag.com webmail.liveoffice.com has https LivingAdvantageInc.org Mail2World.com Mail2web.com MouseHut.com mpls.k12.mn.us Note using port 980 webmail.netfirms.com has https OperaMail.com webmail.optuszoo.com.au has https RoundCubeForum.net not good for a webmail sw provider shastawebmail.com strongwebmail.com had $10K prize for reading CEOs email = hacked within a few minutes soswebmail.com has https Spamcop.net www.thinkwebmail.com www.tuxedowebmail.com webmail.valueweb.net vfemail.net webmail.vmsol.com webmailssl.visi.com has https webasyst.net webmail.webhero.com has https WindStream.net aka webmail.nuvox.net wowmail.com zoho.com www.webmail.co.za has https Copyright © 2000 Linux-Consulting All Rights Reserved. Updated: Tue Aug 10 18:10:10 2010 PDT