I'm doing a very extensive review of network security using an external source to scan our network and identify weak points.
It's also important to realize that such tools (our www.DNSreport.com is a similar one, for DNS) usually work under the assumption that you are the one who needs to determine what is important and what isn't.
The remote SMTP server answers to the EXPN and/or VRFY commands.
Here, EXPN results in "list not found", and VRFY isn't allowed. So by disabling VRFY, you should be all set. But, note that anyone who wants to can find out whether or not users on your server are valid, so disabling VRFY just makes it *slightly* harder to find out that information. If you don't believe me, give me the names of some account(s) that may or may not exist on any IMail server, and I'll tell you if those user accounts exist. :)
Issue 2 IPSwitch IMail SMTP Buffer Overflow
This is a potentially serious issue; unfortunately, it probably requires an upgrade to a later version of IMail.
Issue 3 smtpscan Description smtp (25/tcp) This server could be fingerprinted as being IMail 7.15 -14-
The "HelloMsg" registry entry will take care of this one. I personally don't see this as being very important, but there are a lot of people who believe in security through obscurity.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask about our free 30-day evaluation.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
