Re: [Exim] hiding software type & version

Top Page
Delete this message
Reply to this message
Author: Kevin Sindhu
Date:  
To: Nico Erfurth, Dennis Davis
CC: Timothy Arnold, exim-users@exim.org
Subject: Re: [Exim] hiding software type & version
At 02:24 PM 12/23/2002 +0100, Nico Erfurth wrote:
>On Mon, 23 Dec 2002, Dennis Davis wrote:
>
> > >From: Timothy Arnold <timothy.arnold@???>
> > >To: 'Suresh Ramasubramanian' <mallet@???>,
> > >    Timothy Arnold <timothy.arnold@???>
> > >Cc: "'exim-users@???'" <exim-users@???>
> > >Subject: RE: [Exim] hiding software type & version
> > >Date: Mon, 23 Dec 2002 11:58:51 -0000

> > >
> > >I realize that there might be other methods for determining what
> > >version of MTA/OS I am running, but why give a scriptkiddie an easy
> > >ride?
> >
> > Quite. I'm happy to do this with most s/w *providing* it's
> > cheap to do. My exim configuration files usually include
> > the following somewhere in the main configuration section:
> >
> > # Let's go almost minimal on the SMTP greeting banner. This is
> > # obviously only relevant if we are listening on the SMTP port.
> > smtp_banner = "${primary_hostname} SMTP Server ready."
>
>you should do
>
>smtp_banner = "${primary_hostname} ESMTP Server ready."


Bah...humbug. I am king of hax0ring:

220-InterScan Version 3.7-Build_SOL_1070 $Date: 04/25/2002 11:54:0013$: Ready
220 mail.open-systems.org ESMTP (Microsoft Exchange Internet Mail Service
For Unix 5.5.2653.13+SP2 ready).

-Kev