Re: [Exim] vulnerabilities

> Hi there,
>
> I would like to disable features like EHLO, RCPT, VRFY and EXPN which
may
> enable hackers to gain information. Would you say this is a bad idea?
> If not, how do I go about doing this?
>
vrfy and expn - yeah, turn them off if you want. To turn off vrfy set
smtp_verify = false
in your exim config file (it defaults to false these days though....).
As for expn the config value
smtp_expn_hosts (which is a host list type)
is what you're looking for. This is unset by default....
But disabling EHLO and RCPT is probably not a good idea.....
John