Setting up a box for testing exploits etc..

[Lyecdevf]

But what good is exploiting SMTP service? Can you get access to the machine through this server, or does it just teach you to forge emails? Which really is of little use to me as I don't have any need to phish, but I do suppose it could be used for social engineering, right?

If any one wanted to social engeener over the mail the SMTP server must not be configured to prevent email relaying. Than you spoof an e-mail adress of one of the IT people and request some thing from them like shuting down the computers.