If I turn off the Telnet service, will that take care of the issue where the
banner discloses the ESMTP version?
"Roger Abell [MVP]" <mvpNoSpam.DeleteThis@asu.edu> wrote in message
news:OEsP98rrGHA.4252@TK2MSFTNGP02.phx.gbl...
> There is nothing about Windows that requires telnet, including SMTP.
> If your port 80 is serviced by IIS and the machine is up to date on
> service pack / security patches then what is reported by Nessus is
> not accurate.
>
> "Tim" <tim.DeleteThis@NOSPAMvisualmalls.com> wrote in message
> news:RMedna1GoPMmkFnZnZ2dnUVZ_sCdnZ2d@comcast.com...
>>A recent Nessus scan reported that one of my servers has reported two
>>security holes:
>>
>> 1. Telnet is running and is vulernable to buffer overflows.
>>
>> 2. Port 80 is open and can be killed by sending a request with an too
>> long Basic authentication field.
>>
>> Is the Telnet service required for SMTP to properly function?
>>
>> Thank you.
>>
>
> >> Stay informed about: Telnet & SMTP