Re: SMTP Security

  • From: Dar Scott <dsc@xxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 9 Jan 2002 08:37:44 -0700

At 12:20 PM +0000 1/9/02, John Burridge wrote:

I have heard that it is a security no-no to have your SMTP server reply with
the following when connecting to it through telnet.

"220 <hostname>.<domain>.com Microsoft ESMTP MAIL Service,
 Version: 5.0.2195.1600 ready at Thu, 30 Nov 2000 18:09:43 -0600"

Does anyone know how to disable this response?

I read recently that the RFC requires this and some SMTP servers won't talk to you without it. You might have to provide fake data instead of disabling 220.


Dar Scott





Other related posts: