RE: SMTP Banner info

[Vernon Hamberg <vhamberg@xxxxxxxxx>]

Some responses for TCP/IP apps are found in a message file, QTCP/QTCPMSGF.
Take a look at TCP2273 - that's this one, or something like it. This is
different from below - and on a v5r1 system I work on, so it doesn't seem
to be using this.

     220 &1 running IBM AS/400 SMTP at &2.

You could try changing this message - be sure to preserve its original
values - and see what happens.

Another message appears when you quit the connection - TCP2219 -

     221 &1 running IBM AS/400 SMTP Version &2 Release &3. Connection closing.

If you use the QIBM_QTG_DEVINIT exit point, you can know what server port
is being connected to. This way you know if telnet is not coming in to the
well-defined port for telnet. You could turn these off - there's some kind
of 'service not available' message, I think.

At 02:20 PM 4/19/02 -0600, you wrote:

>Maybe I should clarify what I tried to ask in my original post:
>
>What they recommend is, if possible, modify the data given (i.e. SMTP
>application and version) of our email server, _NOT_ shut down telnet to
>port 25.  This way, there is less information a hacker can use in
>regards to our system.  For example, I checked out the midrange list and
>gathered this information about David's email server:
>
>220 TS400.MALL400.COM running IBM AS/400 SMTP V04R05M00on Fri, 19 Apr
>2002 15:14:35 -0000
>
>Hope this clears up any confusion.
>
>Thanks,
>Kyle
>
>_______________________________________________
>This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
>To post a message email: MIDRANGE-L@midrange.com
>To subscribe, unsubscribe, or change list options,
>visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
>or email: MIDRANGE-L-request@midrange.com
>Before posting, please take a moment to review the archives
>at http://archive.midrange.com/midrange-l.