Its security through obscurity, but I can't anything wrong allow the
administrator to change it.

The downside, If I ever have weird problems sending mail to a domain, I
would often use this information to try and figure why..

Justin

-----Original Message-----
From: Mark Woods [mailto:[EMAIL PROTECTED]
Sent: 28 January 2004 10:04
To: inFusion Support List
Subject: Re: [iMS] remove server software info from SMTP greeting



>That is a behavior of every mail server that I know of.

I don't see why this means IMS has to do the same, there's nothing in the
smtp rfc about providing information about the server software in the
service ready response.


>SOme firewalls (PIX, for example) allow you to mask this.

Which would suggest that it's not a bad idea to just add an option to IMS
to hide the server software information.


BTW, I just needed to know about this because we had some security guys in
looking over our stuff recently and one of the things they pointed out was
that the smtp server provided information that they thought would be better
hidden. TBH, I'd never thought about it before, but when mentioned, it
seemed a pretty reasonable (one might say obvious) thing to do.


Mark

==^=======================================================
This list server is Powered by iMS  "The Swiss Army Knife of Mail Servers"
--------------------------------------------------------------------------------------
This list is provided as a free service.  Although we will try to address issues
in a timely manner, support via this list is not guaranteed.  If you require expedited
support then a support contract is required.  Support may be purchased from
http://www.coolfusion.com/commerce.  Details regarding support options may be reviewed
at: http://www.coolfusion.com/SupportOptions.cfm
--------------------------------------------------------------------------------------
To leave this list please complete the form at http://www.coolfusion.com/Support/
Need an iMS Developer license?  Sign up for a free license here:
http://www.coolfusion.com/Developers/
List archives: http://www.mail-archive.com/infusion-email%40eoscape.com/
Note: You are subscribed as [EMAIL PROTECTED]
==^=======================================================


Reply via email to