full-disclosure - Sidewinder G2

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu)
Subject: Sidewinder G2 

On Tue, 18 Nov 2003 09:49:52 CST, "Perrymon, Josh L." said:
> The cisco PIX doesn't run the actual SMTP service. The problem would be in
> the Fixup for the SMTP protocol.

Hmm.. so we *don't* actually do SMTP, we merely screw with the bits in passing
even more than an actual SMTP relay would do (as it would just slap on a
Received: and keep going).  It answers a SYN packet on port 25, it sends a
distinctive '220 hello' reply different than what might be behind it, it
accepts EHLO/MAIL FROM/RCPT TO/DATA/QUIT, it isn't merely tunneling packets to
a server behind the firewall.

Pedantic sophistry at its best.  It's an SMTP server, guys. Looks like a duck,
quacks like a duck, and slapping a "this is a Fixup not a Server" label on it
isn't gonna remove the duck feathers.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20031118/5ed5da09/attachment.bin