Free Newsletters

   All InfoWorld Newsletters
Security Adviser | Roger A. Grimes » SMTPScan

December 31, 2006 | Comments: (0)

SMTPScan

Use Smtpscan to identify mail server type.

In a class a few months ago, one of my students bet me a $1000 that I couldn't identify his email server. A few minutes later and told him the obscure, 10 year old, Windows 95 email server he was running, and I asked for my money. He thought I was being an uber hacker, but all I had done was downloaded, installed, and used Greyhats SMTPscan.

Smtpscan runs in Linux and BSD (and other systems I'm sure). It's got a great INSTALL document...just follow the included instructions to make and install.

Smtpscan implements 15 different tests against a particular MTA (mail transfer agent (a.k.a. email server)) and reads the results of each test. It doesn't just rely on responding banners.

Smtpscan hasn't been updated in awhile, but its still a handy utility for identifying mail servers. It isn't always accurate, but it's more accurate than Nessus and other vulnerability scanners.

Posted by Roger Grimes on December 31, 2006 12:03 PM


RATE THIS ARTICLE:





 

  •  
  • COMMENTS




Don't forget DNS too;

fpdns utility ("fingerprint DNS");
a Perl script (which might take a little work to get running on some Perl implementations...)

Posted by: Steve at January 1, 2007 12:00 PM

Technology White Papers

 

InfoWorld Technology Marketplace

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
» BUY A LINK NOW

Sponsored Technology Links