Penetration Testing mailing list archives

Re: Avoiding Postfix Fingerprinting

From: Michel Arboi <michel.arboi () gmail com>
Date: Thu, 10 Mar 2005 11:38:47 +0100

On Tue, 8 Mar 2005 17:49:56 +0100, Joachim Schipper
<j.schipper () math uu nl> wrote:

See postconf(5), under smtpd_banner. (I'm pretty sure Nessus just grabs
the banner; however, some more advanced fingerprinting is possible, if
someone is very knowledgeable.)


As several people have already said, smtpscan ignores the banner.
Here is an article from the author:
http://www.greyhats.org/outils/smtpscan/remote_smtp_detect.pdf

Current thread:

Null Session Wbsony (Mar 07)
- Re: Null Session H D Moore (Mar 07)
  - Avoiding Postfix Fingerprinting Isidro Labrador (Mar 08)
    - Re: Avoiding Postfix Fingerprinting Joachim Schipper (Mar 08)
    - Re: Avoiding Postfix Fingerprinting Javier Fernandez-Sanguino (Mar 09)
    - Re: Avoiding Postfix Fingerprinting Olivier Fauchon (Mar 09)
    - Re: Avoiding Postfix Fingerprinting Michel Arboi (Mar 10)
    - Re: Avoiding Postfix Fingerprinting Michel Arboi (Mar 10)