Re: SMTP Security

  • From: John Burridge <JBurridge@xxxxxxxxx>
  • To: "'[ Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 9 Jan 2002 15:39:08 -0000

Valid point - What I really want disabled is the Version of SMTP

-----Original Message-----
From: Dar Scott [mailto:dsc@xxxxxxxx] 
Sent: 09 January 2002 15:38
To: [ Discussion List]
Subject: [isalist] Re: SMTP Security

At 12:20 PM +0000 1/9/02, John Burridge wrote:
>I have heard that it is a security no-no to have your SMTP server reply
>the following when connecting to it through telnet.
>"220 <hostname>.<domain>.com Microsoft ESMTP MAIL Service,
>  Version: 5.0.2195.1600 ready at Thu, 30 Nov 2000 18:09:43 -0600"
>Does anyone know how to disable this response?

I read recently that the RFC requires this and some SMTP servers 
won't talk to you without it.  You might have to provide fake data 
instead of disabling 220.

Dar Scott

You are currently subscribed to this Discussion List as:
To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: