Arnt Gulbrandsen wrote:

Mark Crispin writes:

It calls itself "MailSite IMAP4 Server 5.3.6.0" (I think that MailSite is the name of the ISP; the domain is that user's vanity domain) and it advertises the IMAP4rev1 ACL NAMESPACE QUOTA AUTH=SCRAM-MD5 AUTH=LOGIN AUTH=CRAM-MD5 capabilities.


Isn't that the Rockcliffe server? I only saw it briefly, sometime last year, but somehow it brings back an echo.

Yes, I am also pretty sure that is Rockliffe. I'm surprised that it is not advertising AUTH=NTLM. A friend of mine has one of these and I used it to test my SASL NTLM plugin against it.


Btw, I do wish more servers would implement ID. The banner and capability strings are precise enough for the bad guys to pick the right sploits, but for problems like this, ID would help.

I agree. We use it for Cyrus to get the version and compile-time info from users. If clients used it and actually sent its own info that would be helpful as well.


--
Kenneth Murchison     Oceana Matrix Ltd.
Software Engineer     21 Princeton Place
716-662-8973 x26      Orchard Park, NY 14127
--PGP Public Key--    http://www.oceana.com/~ken/ksm.pgp



Reply via email to