Re: [exim] the great TLS mystery

On 2/24/2011 5:20 PM, WJCarpenter wrote:
>
>> This has been tampered with by an intermediary.
>> In Exim, the "HELP" EHLO keyword is always last.
>
> When the user telnet'd to port 8111, he got the proper response, not
> the tampered response.
>

Minor update ... he tried port 587 from another computer in his house.
Same tampered results. So, either the same virus, the same antivirus
effect, or it's the ISP. I have further inquiries pending.