Not too worried about the firewall issue actually. It is a
Cisco PIX and doesn't do exactly what I described as I was being lazy. Among other things it obfuscates the 220 response message on an initial connect to the SMTP port so that a remote host/user cannot see what software is driving it - in other words:
220 libra.ldv.co.uk ESMTP Service (Lotus Domino Release 6.0) ready at Wed, 6 Nov 2002 09:18:05 +0000
becomes
220*******************************************************0**********************2002*0*****0***0000
It also does clever things with timing, so can tell if someone is trying to hand crank SMTP using Telnet against port 25 (just stops talking when this happens).
Pretty good firewall on the whole, but the significant feature here is that it does not speak SMTP itself as some "firewalls" do, thus becoming an intermediate relay on all email.
Thanks again.
Return to top
. . . . . . . . Thanks (~Kelly Zekwebur... 6.Nov.02) 
Print this page
