WARNING ABOUT DNS RESOLVE IN NESSUS AND VERISIGN DNS CHANGES

Javier Fernandez-Sanguino jfernandez at germinus.com
Thu Sep 18 05:53:52 EDT 2003


Michael Scheidell wrote:
> Remote SMTP server banner :
> 220 snubby1-wceast Snubby Mail Rejector Daemon v1.3 readyr
> 

How about a plugin that detects specifically this banner and warns about 
it? As some people have pointed out in other mailing lists, Verising 
mail server does not comply with any kind of standards (it justs 
answers, regardless of what it is feed to, it several 220 responses and 
then a 500 reject).

It might or might not be relevant since Verisign might desist from 
breaking up the Internet (indeed, the SMTP server is not available at 
the moment)

Also, having a plugin that just checked the remote IP address and warned 
"You might have introduced a typo in the hostname X, you are going to 
scan Verisign" maybe could be appropiate also.

IMHO it really depends on how long will Verising keep this fuck-up. If 
they back step in a week/month it's not worth dedicating them a plugin.

Regards


Javi






More information about the Nessus mailing list