Re: service-probe question: FTP services

[doug () hcsw org]

On Tue, Feb 03, 2009 at 08:02:30PM -0800 or thereabouts, Fyodor wrote:
> Looking at our current nmap-service-probes, the first real probe for a
> TCP service on port 25 will be the "Hello" (which didn't exist at the
> time of the fingerprint above).  So my suggestion would be to move the
> OpenBSD spamd signature to the bottom of the HelLo probe SMTP
> signatures.

Good idea. I agree that this should eliminate basically all false
positives. I just checked this change in.

Doug

Attachment: _bin
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org