WARNING ABOUT DNS RESOLVE IN NESSUS AND VERISIGN DNS CHANGES
Javier Fernandez-Sanguino
jfernandez at germinus.com
Thu Sep 18 05:53:52 EDT 2003
Michael Scheidell wrote:
> Remote SMTP server banner :
> 220 snubby1-wceast Snubby Mail Rejector Daemon v1.3 readyr
>
How about a plugin that detects specifically this banner and warns about
it? As some people have pointed out in other mailing lists, Verising
mail server does not comply with any kind of standards (it justs
answers, regardless of what it is feed to, it several 220 responses and
then a 500 reject).
It might or might not be relevant since Verisign might desist from
breaking up the Internet (indeed, the SMTP server is not available at
the moment)
Also, having a plugin that just checked the remote IP address and warned
"You might have introduced a typo in the hostname X, you are going to
scan Verisign" maybe could be appropiate also.
IMHO it really depends on how long will Verising keep this fuck-up. If
they back step in a week/month it's not worth dedicating them a plugin.
Regards
Javi
More information about the Nessus
mailing list