Re: removing banners from cyrus

2002-04-02 Thread Clifford Thurber
OK using your logic I will deduce that since anything on a network can be hacked into I should not attempt to take any security precautions. Security is applied in layers and the more layers the better. My question was not intended to start a thread regarding security practices as that is not t

Re: removing banners from cyrus

2002-04-02 Thread David Lang
ad version then if you could check. David Lang On 2 Apr 2002, Jim Levie wrote: > Date: 02 Apr 2002 13:59:18 -0600 > From: Jim Levie <[EMAIL PROTECTED]> > To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> > Subject: Re: removing banners from cyrus > >

Re: removing banners from cyrus

2002-04-02 Thread Jim Levie
On Tue, 2002-04-02 at 13:26, Ken Murchison wrote: > > > Clifford Thurber wrote: > > > > Ken I am just interested in suppresing platform/version information when > > someone telnet to port 143. Just one more layer of security. > > But by doing this, you're implying that there is a security hole

Re: removing banners from cyrus

2002-04-02 Thread Ken Murchison
Clifford Thurber wrote: > > Ken I am just interested in suppresing platform/version information when > someone telnet to port 143. Just one more layer of security. But by doing this, you're implying that there is a security hole in the Cyrus server which can be exploited if the hacker discover

Re: removing banners from cyrus

2002-04-02 Thread Clifford Thurber
Ken I am just interested in suppresing platform/version information when someone telnet to port 143. Just one more layer of security. If I understand you correctly I just need to add: "imapidresponse: no" to /etc/imapd.conf? This correct. >If you think that having the vendor/version informa

Re: removing banners from cyrus

2002-04-02 Thread Ken Murchison
Clifford Thurber wrote: > > I am confused as to what or why there are things specific to Netscape. > Perhaps I have left out the context of my question. I am trying to prevent > people doing recognizance banner grabbing for security reasons> If you think that having the vendor/version informa

Re: removing banners from cyrus

2002-04-02 Thread Clifford Thurber
I am confused as to what or why there are things specific to Netscape. Perhaps I have left out the context of my question. I am trying to prevent people doing recognizance banner grabbing for security reasons> At 04:15 PM 4/2/2002 +0100, Steve Wright wrote: >Changing pop3d.c will only change

Re: removing banners from cyrus

2002-04-02 Thread Steve Wright
Changing pop3d.c will only change the "+OK %s Cyrus POP3 v2.0.15 server ready" banner. If you want to change the imap banner, to the best of my knowledge you have to change (in imapd.c) the "OK %s Cyrus IMAP4 %s server ready\r\n" line (same as pop3d.c), the section containing the imap id (as

Re: removing banners from cyrus

2002-04-02 Thread Clifford Thurber
This will take care of both the IMAP and POP3 banners? Nothing needs to be done to say .. imapd.c Thanks again At 11:01 AM 4/2/2002 +0100, Steve Wright wrote: >The "+OK %s Cyrus POP3 v2.0.15 server ready" banner can be changed by editing >line 323 in /src/cyrus-imapd-2.0.15/imap/pop3d.c >

Re: removing banners from cyrus

2002-04-02 Thread Steve Wright
The "+OK %s Cyrus POP3 v2.0.15 server ready" banner can be changed by editing line 323 in /src/cyrus-imapd-2.0.15/imap/pop3d.c On Tuesday 02 April 2002 10:06, you wrote: > > What is the procedure for removing the banners from Cyrus? I am sure > > this involves edition a source file and recomp

Re: removing banners from cyrus

2002-04-02 Thread Simon Loader
> What is the procedure for removing the banners from Cyrus? I am sure > this involves edition a source file and recompiling I hust haven't > seen this documented anywhere. If someone could advise. Thanks Banners Cyrus ??? Cyrus doesnt have banners ? Does it ? Are you sure it is not your MTA

removing banners from cyrus

2002-04-01 Thread Clifford Thurber
What is the procedure for removing the banners from Cyrus? I am sure this involves edition a source file and recompiling I hust haven't seen this documented anywhere. If someone could advise. Thanks