Date: Fri, 14 Aug 1998 09:40:32 -0700 (PDT) From: Satya Palani <satya@longshadows.com> To: Garrett Wollman <wollman@khavrinen.lcs.mit.edu> Cc: security@FreeBSD.ORG Subject: Re: Sendmail greeting Message-ID: <Pine.NEB.3.96.980814093553.22336A-100000@ns1.netcorps.com> In-Reply-To: <199808140111.VAA02156@khavrinen.lcs.mit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 13 Aug 1998, Garrett Wollman wrote:
> I just updated my desktop machine after nine months of stasis, and one
> of the first things I did when migrating my .mc file over was to add
> the following:
>
> define(`confSMTP_LOGIN_MSG', `$j server ready at $b')dnl
>
> This gives a greeting like:
>
> 220 khavrinen.lcs.mit.edu ESMTP server ready at Thu, 13 Aug 1998 21:10:03 -0400 (EDT)
>
> ...which doesn't leak any version information at all.
Of course, the version number is still being broadcast through the
headers. Take this message, for example:
Received: (from wollman@localhost)
by khavrinen.lcs.mit.edu (8.9.1/8.9.1) id VAA02156;
Thu, 13 Aug 1998 21:11:31 -0400 (EDT)
(envelope-from wollman)
Whether you consider this a leak or not is up to you...
-Satya
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.NEB.3.96.980814093553.22336A-100000>