Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
smtp-relay
Advanced tools
![logo](https://raw.githubusercontent.com/loopingz/aws-smtp-relay/master/docs/aws-smtp-relay-logo.png)
This project replace a previous project aws-smtp-relay
The goal is to have a dynamic SMTP server that can either be used to run a debug SMTP locally that just store received email in a folder
Or relay a SMTP protocol to an SES API call (goal of aws-smtp-relay
)
Or simulate some Incoming capabilities of AWS SES, like mail2s3
or mail2sqs
and similar mail2gcpstorage
and mail2gcppubsub
Docker command
docker run -p 10025:10025 loopingz/smtp-relay:latest configs/aws-smtp-relay.jsonc
Configuration file can leverage the published schema
{
"$schema": "https://raw.githubusercontent.com/loopingz/smtp-relay/main/config.schema.json"
}
Replace main
in url by the tag version to get the configuration format of a specific version
Run with a configuration file:
// Replace my previous project aws-smtp-relay
{
"$schema": "https://raw.githubusercontent.com/loopingz/smtp-relay/main/config.schema.json",
"flows": {
"localhost": {
"filters": [
// Allow any ip to use the SMTP
{
"type": "whitelist",
"ips": ["regexp:.*"]
}
],
"outputs": [
{
"type": "aws",
// Send it to SES
"ses": {}
}
]
}
},
"options": {
"disableReverseLookup": false,
// Do not require auth
"authOptional": true,
"loggers": [
{
"level": "INFO",
"type": "CONSOLE"
},
{
"level": "INFO",
"type": "FILE",
"filepath": "./smtp.log"
}
]
}
}
{
"flows": {
"localhost": {
"filters": [
// Allow any ip to use the SMTP
{
"type": "whitelist",
"to": ["regexp:.*@mydomain.com"]
}
],
"outputs": [
{
"type": "gcp",
// Store it in the bucket
"path": "gs://myemail/",
// Send a message to the queue containing the bucket url if exist and the metadata of the email
"pubsub": ""
}
]
}
},
"options": {
"disableReverseLookup": false,
// Do not require auth
"authOptional": true
}
}
You can just leveraging the Docker image
docker run -p 10025:10025 -v `pwd`/emails:/smtp-relay/received_emails loopingz/smtp-relay:latest ./configs/fake-smtp.jsonc
# With auth
docker run -e SMTP_USERNAME=test -e SMTP_PASSWORD=plain:test -p 10025:10025 -v `pwd`/emails:/smtp-relay/received-emails loopingz/smtp-relay:latest configs/fake-smtp-with-auth.jsonc
The smtp server is subdivided with:
These components decide to accept or refuse an email.
At each SMTP command step, they can make a decision to refuse or accept an email or not make a decision boolean|undefined
By default, 3 filters exist:
These components receive the email sent after it was accepted by the filters.
There is 4 types:
A flow is defined within the configuration, it defines the filters and the outputs to apply if the message match the filters
You can have as many flow as you desire within the SMTP server
Manage the coordination of different component and is in charge of capturing the mail stream
iso8601: date and time in YYYYmmddHHiiss format
timestamp: UNIX timestamp
id: Session id
The following variables are not always available but should be within processors
from: Email of the sender
messageId: Message id
subject: subject of the email
to: list of recipient comma separated
You can define log configuration with the loggers definition.
We currently support "CONSOLE" or "FILE"
"loggers": [
{
"level": "INFO",
"type": "CONSOLE"
},
{
"level": "INFO",
"type": "FILE",
"filepath": "./smtp.log",
"sizeLimit": 50000000
}
]
From the library @webda/workout
, the loglevel if not defined fallback to the LOG_LEVEL
environment variable and then fallback again to INFO
The FILE
type have a size limit defined and will increment a number at the end of the filepath if needed. It has a default sizeLimit define by the library.
A format
can be defined too
Thanks goes to these wonderful people (emoji key):
Remi Cattiau 📖 💻 🚇 |
This project follows the all-contributors specification. Contributions of any kind welcome!
FAQs
![logo](https://raw.githubusercontent.com/loopingz/aws-smtp-relay/master/docs/aws-smtp-relay-logo.png)
The npm package smtp-relay receives a total of 0 weekly downloads. As such, smtp-relay popularity was classified as not popular.
We found that smtp-relay demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.