IMail EVAL version IMail non-EVAL version IMail non-EVAL version AnalogX proxy http://www.analogx.com/contents/download/network/proxy.htm 192.168.1.1 SMTP AnalogX Proxy 4.15 (Release) ready ArGoSoft Mail Server is fully functional STMP/POP3/Finger server for Windows 95/98/NT/2000. http://www.argosoft.com/applications/mailserver/ Example: 220 ArGoSoft Mail Server, Version 1.4 (1.4.0.3) ArGoSoft Mail, freeware version example.com ArGoSoft Mail Server Freeware, Version 1.8 (1.8.8.8) Example: 220 ArGoSoft Mail Server Pro for WinNT/2000, Version 1.61 (1.6.1.8) AppleShare IP Mail Server (3 version numbers) AppleShare IP Mail Server (2 version numbers) CheckPoint FireWall-1 Cisco Pix v4.x Youngzsoft CCProxy SMTP CCProxy 7.3 SMTP Service Ready(Unregistered) Cisco PIX firewall: PIX sits between an internal SMTP server and the rest of the world. Its MailGuard feature strips all information out of the 220 header except for the ' ' (space), '2' (digit two), and '0' (digit zero) characters, replacing them with asterisks. While this effectively hides the back-end SMTP server, it does tell us that they are running Cisco PIX firewall (at least for SMTP, and possibly other services as well). Search Cisco's documentation for "fixup protocol SMTP" for more information. Critical Path (aka InScribe) Messaging Server http://www.cp.net/products/inscr_messagingserv_overview.html Runs on Windows NT4/2k, Solaris 2.6, 2.7, and 2.8 Sparc/Intel, SGI IRIX 6.5.3 or later, and AIX CSM Internet Mail Scanner SMTP proxy see http://www.csm-usa.com/product/ims/release.htm TODO: Some versions return a typo "read." instead of "ready." - use this to fingerprint example: 220 CSM Internet Mail Scanner SMTP-Gateway ready. example: 220 CSM Internet Mail Scanner SMTP-Gateway read. EMWAC Internet Mail Services http://emwac.ed.ac.uk/html/internet_toolchest/ims/ims.htm example: 220 gabriela.networld.com.ar IMS SMTP Receiver Version 0.83 Ready Eudora Internet Mail Server (3 version numbers) example: 220 interlink.com.ar running Eudora Internet Mail Server 3.0.2 example: 220 mail.gis.at running Eudora Internet Mail Server 2.2 Eudora Internet Mail Server (2 version numbers) 220 mail.gis.at running Eudora Internet Mail Server 2.2 Microsoft Exchange Server 5.5 and above (for sure, can't be confused with the IIS builtin SMTP service) Microsoft Exchange Server 5.0 (for sure, can't be confused with the IIS builtin SMTP service) Microsoft Exchange 2007/2010 (for sure, can't be confused with the IIS builtin SMTP service) foo Microsoft ESMTP MAIL Service ready at Wed, 21 Jul 2010 19:04:24 -0700 Microsoft IIS builtin SMTP service, or Microsoft Exchange Server (they are differentiated from each other in smtp-iis.clp) Microsoft IIS builtin SMTP service, or Microsoft Exchange Server (they are differentiated from each other in smtp-iis.clp) Exim (3 version numbers) example: 220 foo.bar.com ESMTP Exim 3.12 #1 Wed, 31 Jan 2001 15:47:23 +1100 example: 220 foo.bar.com ESMTP Exim 3.22 1 Mon, 30 Jul 2001 23:16:12 +0100 [NO UCE, NO SPAM] FTGate mail server, runs on Windows 9x/NT/2k http://www.ftgate.com Example: 220 stoddardhoney.com FTGate server ready -attitude [C.o.r.E] TIS FWTK and derivatives http://www.tis.com/research/software/ This fingerprint may be ambiguous because other firewalls (like Gauntlet) are derived from TIS Novell GroupWise Internet Agent versions 5 and higher, 3 version numbers example: 220 coleharbourplace.com GroupWise Internet Agent 5.5.1 Ready (C)1993, 1998 Novell, Inc. Novell GroupWise Internet Agent versions 5 and higher, 2 version numbers Novell GroupWise versions below 5 example: 220 bates.at GroupWise SMTP/MIME Daemon 4.1 v3 Ready (C)1993, 1996 Novell, Inc. IBM SMTP server for VM/ESA on IBM S/390 and IBM eserver z/Series 900. http://www.vm.ibm.com http://www-1.ibm.com/servers/eserver/zseries/ http://mitvma.mit.edu/system/vm.html example: 220 mail.foo.bar running IBM VM SMTP Level 3A0 on Mon, 10 Sep 2001 07:21:54 EDT example: 220 mail.foo.bar running IBM VM SMTP V2R4 on Mon, 10 Sep 2001 12:23:47 +0100 IBM SMTP server for VM/ESA on IBM S/390 and IBM eserver z/Series 900. http://www.vm.ibm.com http://www-1.ibm.com/servers/eserver/zseries/ http://mitvma.mit.edu/system/vm.html example: 220 mail.foo.bar ESMTP running IBM VM SMTP V2R4; Mon, 10 Sep 2001 07:24:35 -0400 (EDT) Syntegra/CDC IntraStore TurboSendmail, part of the IntraStore server which runs on the following platforms ONLY: Linux, HP-UX, Solaris, AIX, and Windows NT/2000 see http://www.cdc.com for more information 192.168.1.1 (IntraStore TurboSendmail) ESMTP Service ready JAMES SMTP Server example.com SMTP Server (JAMES SMTP Server 2.3.2) ready Tue, 19 May 2015 00:36:13 +0200 (CEST) Mail Max (4 version numbers) example: 220 MAIL3 (Mail-Max Version 4.2.4.7, Wed, 31 Jan 2001 03:44:35 +0100 WST) ESMTP Mail Server Ready. Simple MailEnable example.com ESMTP MailEnable Service, Version: 1.8-- ready at 05/20/15 08:50:22 Mail Max (2 version numbers) example: 220 WEBB (Mail-Max Version 3.065, Wed, 31 Jan 2001 03:46:11 +0100 WST) ESMTP Mail Server Ready. Rockliffe MailSite http://www.rockliffe.com example: 220 bas.com.ar MailSite ESMTP Receiver Version 3.4.6.0 Ready Rockliffe MailSite http://www.rockliffe.com example: 220 rhino.accessweb.com MailSite SMTP Receiver Version 2.1.7 Ready Content Security MAILsweeper for SMTP http://www.contenttechnologies.com/products/msw4smtp/default.asp example: 220 infotech.at MAILsweeper ESMTP Receiver Version 4.2.1.0 Ready MDaemon mail server 220 foo.bar ESMTP MDaemon 4.0.5 UNREGISTERED; Sat, 06 Oct 2001 09:10:56 +0400 MDaemon mail server 220 foo.bar ESMTP MDaemon 4.0.2; Sat, 06 Oct 2001 01:46:44 -0500 MDaemon mail server 220 foo.bar ESMTP MDaemon 3.5.7 ready MDaemon mail server 220 foo.bar.com ESMTP service ready [1] MDaemon v2.84 R MDaemon mail server 220 foo.bar.com ESMTP service ready [1] using MDaemon v3.0.3 R MDaemon mail server 220 foo.bar.com ESMTP service ready [1] MDaemon v2.7 SP5 R MDaemon mail server 220 foo.bar.com ESMTP service ready [1] MDaemon v2.8.7.0 R MDaemon mail server 220 foo.bar.com ESMTP service ready [2] (MDaemon v2.7 SP4 R) MDaemon mail server 220 foo.bar.com ESMTP service ready [1] (MDaemon v2.5 rB b1 32-T) Merak mail server http://www.icewarp.com/merakmail/ (runs on 2000/NT/9x) 220 mail.db-list.com ESMTP MERAK 3.00.140; Tue, 24 Jul 2001 21:30:47 -0700 Atrium's MERCUR SMTP server http://www.atrium-software.com/pub/support_e.cfm example: 220 MERCUR SMTP-Server (v3.20.01 KA-0098304) for Windows NT ready at Tue, 6 Feb 2001 21:38:26 +0100 example: 220 MERCUR SMTP-Server (v3.20.01 KA-0098304) for Windows NT ready at Tue, 6 Feb 2001 21:38:26 +0100 example: 220 MERCUR SMTP-Server (v3.10.18 KA-0098307) for Windows NT ready at Tue, 6 Feb 2001 18:44:03 +0100 example: 220 MERCUR SMTP-Server (v3.10.18 KA-0098316) for Windows NT ready at Tue, 6 Feb 2001 15:01:51 +0100 example: 220 MERCUR SMTP-Server (v3.30.03 KA-0098319) for Windows NT ready at Tue, 6 Feb 2001 19:06:18 +0100 example: 220 MERCUR SMTP-Server (v3.30.03 KA-5341199) for Windows NT ready at Tue, 6 Feb 2001 18:47:09 +0100 example: 220 MERCUR SMTP-Server (v3.20.01 AS-0098307) for Windows NT ready at Tue, 6 Feb 2001 15:13:14 +0100 example: 220 MERCUR SMTP-Server (v3.20.01 AS-0098309) for Windows NT ready at Tue, 6 Feb 2001 16:11:42 +0100 example: 220 MERCUR SMTP-Server (v3.10.16 AS-7962628) for Windows 95 ready at Tue, 6 Feb 2001 16:37:38 +0100 example: 220 MERCUR SMTP-Server (v3.10.18 AS-5341186) for Windows NT ready at Tue, 6 Feb 2001 19:27:24 +0100 example: 220 MERCUR SMTP-Server (v3.30.03 CO-0098319) for Windows NT ready at Tue, 6 Feb 2001 20:45:01 +0100 example: 220 MERCUR SMTP-Server (v3.30.01 NR-7864330) for Windows NT ready at Tue, 6 Feb 2001 21:31:18 +0100 example: 220 MERCUR SMTP-Server (v3.30.03 DG-0098304) for Windows NT ready at Tue, 6 Feb 2001 22:52:50 +0100 example: 220 MERCUR SMTP-Server (v3.20.01 SY-0098318) for Windows NT ready at Tue, 6 Feb 2001 23:26:22 +0100 Mercury NLM for Netware http://www.pmail.com/index.cfm example: 220 mail.law.utexas.edu Mercury 1.43 ESMTP server ready. Mercury/32 for Win9x/NT/2000 http://www.pmail.com/index.cfm example: 220 jimmy.qmuc.ac.uk Mercury/32 v3.01a SMTP/ESMTP server ready. Mercury/32 for Win9x/NT/2000 http://www.pmail.com/index.cfm example: 220 mail-gateway1.acfw.net Mercury/32 v3.30 ESMTP server ready. Norton Antivirus for Internet Email Gateways (note the product changed its name from "Norton Antivirus for Internet Email Gateways" (NAVIEG) to "Norton Antivirus for Gateways" (NAVGW) as of version 2.1 example: mailman.laughlin.af.mil SMTP NAVIEG 2.0.1; Sun, 29 Jul 2001 22:02:16 -0500 http://www.symantec.com Netscape Messaging Server example: 220 mail.iasmail.net ESMTP service (Netscape Messaging Server 4.15 Patch 2 (built May 30 2000)) Netscape Messaging Server Lotus Notes 4 SMTP MTA Lotus Domino 5 SMTP MTA 220 foo.bar.com ESMTP Service (Lotus Domino Release 5.0.5) ready at Wed, 19 Dec 2001 19:54:55 -0500 Lotus Domino 5 SMTP MTA example: 220 foo.bar.com ESMTP Service (Lotus Domino Release 5.0a) ready at Wed, 20 Jun 2001 08:59:17 +0200 Lotus Domino 5 SMTP MTA, International product version example: 220 foo.bar.com ESMTP Service (Lotus Domino Release 5.0.5 (Intl)) ready at Tue, 6 Feb 2001 18:54:23 -0500 Lotus Domino (some early build) 220 foo.bar.com ESMTP Service (Lotus Domino Build 166.1) ready at Tue, 6 Feb 2001 2 Lotus Notes 4.x with SMTP MTA add-on 220 Lotus Notes ESMTP Server X1.0 on RedSox R45 Server/Red Sox/US ready at Fri, 15 Feb 2002 09:46:19 -0800. NTMail http://www.gordano.com example: 220 lilzmail.liwest.at NTMail (v4.30.0012/NU2182.02.1cf87970) ready for ESMTP transfer example: 220 pluto.wvwc.edu NTMail (v5.06.0016/NT9445.00.28cc9615) ready for ESMTP transfer versions 3.x and earlier of NTMail http://www.gordano.com (it was called Internet Shopper's something or other) example: 220 mail.Networkengineering WindowsNT SMTP Server v3.03.0018/1.aio1/SP ESMTP ready at Wed, 25 Jul 2001 23:03:11 -0400 example: 220 mars.wvwc.edu WindowsNT SMTP Server v3.03.0018/1.ajhf/SP ESMTP ready at Thu, 29 Oct 1998 18:01:30 -0500 example: 220 mail.someisp.net WindowsNT SMTP Server v3.03.0017/1.aihl/SP ESMTP ready at Sun, 6 Jun 1999 10:39:30 -0400 example: 220 nt03s02.switchlink.be WindowsNT SMTP Server v3.03.0014/1.aiss/SP ESMTP ready at Fri, 17 Apr 1998 16:59:04 +0100 example: 220 www.afsc.org WindowsNT SMTP Server v3.03.0017/1.abkz/SP ESMTP ready at Mon, 2 Oct 2000 11:50:29 -0400 example: 220 wwmerchant.osopinion.com WindowsNT SMTP Server v3.03.0017/4c.adur/SP ESMTP ready at Fri, 26 Mar 1999 13:20:30 -0700 example: 220 digital-hoon.tecdm.dmi.co.kr WindowsNT SMTP Server v3.02.07/2c.aaaj ready at Thu, 5 Dec 1996 22:46:12 +0000 Some unknown mail server on OpenVMS example.com V5.7-ECO4, OpenVMS V8.4 IA64 ready at Wed, 20 May 2015 01:22:32 +0100 (BST) example.com V5.4-15E, OpenVMS V7.3-2 Alpha ready at Wed, 20 May 2015 01:22:18 +0100 (BST) example.com UCX V4.2-21I, OpenVMS V6.2 VAX ready at Wed, 20 May 2015 01:15:16 GMT example.com UCX V4.2-21I, OpenVMS V6.2-1H3 Alpha ready at Wed, 20 May 2015 00:55:37 GMT A.K.I PMail example.com ESMTP PMailServer [Free Edition] 1.91; Fri, 22 May 2015 02:04:56 Postfix (2 version ids, followed by os) Postfix (2 version numbers) Postfix (2 version numbers ) Postfix (1 version number) Postfix Ubuntu package. foo.bar.com ESMTP Postfix (Ubuntu) Postfix Debian package. foo.bar.com ESMTP Postfix (Debian/GNU) Generic Postfix banner with amusing comments in parentheses foo.bar.com ESMTP Postfix (lol) Generic Postfix banner. foo.bar.com ESMTP Postfix Post.Office (3 version numbers) 192.168.1.1 ESMTP server (Post.Office v3.1 release PO205e ID# 0-42000U100L2S100) ready Tue, 6 Feb 2001 19:38:32 +0100 Post.Office lacking word "release" before release tag Raptor Firewall example: 220 foo.bar.com Generic SMTP handler SAP SMTP Server example.com SAP 8.04(53) ESMTP service ready sendmail on HPUX with a PHNE (HP Networking patch) installed foo.bar.com ESMTP Sendmail 8.8.6 (PHNE_14041)/8.7.1; Tue, 6 Feb 2001 10:04:32 -0300 (SAT) sendmail on HPUX example.com ESMTP Sendmail @(#)Sendmail version 8.13.3 - Revision 1.004:: HP-UX11.31 - 03rd February,2010/8.11.1; Wed, 20 May 2015 23:35:38 GMT sendmail on unixware foo.bar.com ESMTP Sendmail 8.8.7/UW7.1.0 ready at Tue, 6 Feb 2001 16:39:30 -0300 (GMT-0300) sendmail on AIX foo.bar.com ESMTP Sendmail AIX4.2/UCB 8.7; Sun, 29 Jul 2001 22:34:37 -0400 (EDT) sendmail on AIX foo.bar.com Sendmail AIX 4.1/UCB 5.64/4.03 ready at Mon, 30 Jul 2001 00:42:21 -0500 sendmail on AIX foo.bar.com ESMTP Sendmail AIX4.2/8.7/8.7; Sun, 29 Jul 2001 22:34:37 -0400 (EDT) sendmail on suse foo.bar.com ESMTP Sendmail 8.9.3/8.9.3/SuSE Linux 8.9.3-0.1; Mon, 30 Jul 2001 04:48:54 +0200 sendmail on Solaris foo.bar.com ESMTP Sendmail 8.9.3+Sun/8.9.1; Mon, 30 Jul 2001 02:50:22 GMT sendmail on Solaris foo.bar.com ESMTP Sendmail 8.8.8+Sun/8.6.4 ready at Thu, 15 Nov 2000 11:40:32 -0800 (PST) sendmail on debian foo.bar.com ESMTP Debian Sendmail 8.12.0.Beta7/8.12.0.Beta7/Debian 8.12.0.Beta7-1; Sun, 29 Jul 2001 18:52:20 -0800 sendmail on debian foo.bar.com ESMTP Sendmail 8.11.0/8.9.3/Debian 8.9.3-21; Sun, 29 Jul 2001 19:51:00 -0700 Sendmail for Ubuntu foo.bar.com ESMTP Sendmail 8.13.5.20060308/8.13.5/Debian-3ubuntu1.1; Fri, 24 Jul 2009 01:41:21 -0700; (No UCE/UBE) logging access from: xyz.example.com(OK)-xyz.example.com [10.0.0.1] unknown foo.bar.com Sendmail SMI-8.6/SMI-SVR4 ready at Sun, 29 Jul 2001 22:58:46 -0400 unknown foo.bar.com ESMTP Sendmail 8.9.3/linuxconf; Sun, 29 Jul 2001 22:48:28 -0400 unknown foo.bar.com ESMTP MetaInfo Sendmail 2.5 Build 2630 (Berkeley 8.8.6)/8.8.4; Mon, 30 Jul sendmail where both daemon and config file are patched foo.bar.com ESMTP Sendmail 8.9.3+3.4W/8.9.3+3.4W; Tue, 30 Jan 2001 20:40:09 -0500 (EST) sendmail where neither daemon nor config file are patched (with timezone) mail.foo.bar ESMTP Sendmail 8.8.8/8.8.8; Wed, 21 Nov 2001 23:39:07 +0100 (CET) mail.foo.bar ESMTP blah Sendmail 8.8.8/8.8.8; Wed, 21 Nov 2001 23:39:07 +0100 (CET) sendmail where neither daemon nor config file are patched (without timezone) mail.foo.bar ESMTP Sendmail 8.10.2/8.10.2; Mon, 10 Sep 2001 08:37:14 -0400 mail.foo.bar ESMTP Sendmail 8.8.7/8.8.7; Mon, 2 Jul 2001 14:19:18 -0700 foo.example.com ESMTP foo-MTA Sendmail 8.13.8/8.13.8; Mon, 18 Apr 2011 08:52:38 -0700 some old version of sendmail - TODO: figure out which versions this could be mail.foo.bar Sendmail ready. sendmail with daemon version only mail.foo.bar ESMTP Sendmail 8.8.8 ready at Tue, 6 Feb 2001 14:37:14 +0100 (CET) unknown mail.foo.bar ESMTP Sendmail 8.11.1 (1.1.2.11/12Jul01-1016AM) Wed, 8 Jan 2003 11:21:22 +0100 (MET) unknown foo.example.com ESMTP Sendmail 8.11.1 - (Revision 1.010)/8.9.3; Sat, 22 Jan 2011 10:08:35 -0500 (EST) unknown foo.example.com ESMTP Sendmail @(#)Sendmail version 8.13.3 - Revision 2.007 - 8 December 2008/8.8.6; Wed, 21 Jul 2010 11:17:01 -0400 (EDT) catch all for other versions of sendmail catch all for other versions of sendmail catch all for other versions of sendmail catch all for other versions of sendmail catch all for other versions of sendmail catch all for other versions of sendmail catch all for other versions of sendmail catch all for other versions of sendmail, with a date/time example.com ESMTP Sendmail Wed, 20 May 2015 17:17:56 -0600 220 smtp.foo.bar -- Server ESMTP (Sun Internet Mail Server sims.4.0.2000.10.12.16.25.p8) 220 mercury.doc.ntu.ac.uk -- Server ESMTP (Sun Internet Mail Server sims.4.0.1999.06.13.00.20) Seattle Labs SLMail server for Windows NT/2k (v2.7 runs on Win9x) http://serverwatch.internet.com/reviews/mail-slmail.html http://www.seattlelab.com/ example: 220 mail2.webgeneral.com Smtp Server SLMail v2.7 Ready ESMTP spoken here Seattle Labs SLMail server for Windows NT/2k (v2.7 runs on Win9x) http://serverwatch.internet.com/reviews/mail-slmail.html http://www.seattlelab.com/ example: 220 wl004.pbx.web-light.net SMTP Server SLmail 3.2.3113 Ready ESMTP spoken here Seattle Labs SLMail server for Windows NT/2k (v2.7 runs on Win9x) http://serverwatch.internet.com/reviews/mail-slmail.html http://www.seattlelab.com/ example: 220 mail2.webgeneral.com Smtp Server SLMail v2.7 Ready ESMTP spoken here Symantec Mail Security for SMTP VOPMail http://www.vircom.com/en/products/vopmail/vopmail.shtml example: 220 compudata.com.ar VOPmail ESMTP Receiver Version 4.0.179.0 Ready VPOP3 Email server: http://www.pscs.co.uk/products/vpop3/index.html example: 220 mail.sbm.com.ar VPOP3 SMTP Server Ready http://www.mcafeeb2b.com/products/webshield-smtp/default.asp example:220 smtp.foo.bar WebShield SMTP V4.5 Network Associates, Inc. Ready at Fri Jun 22 02:36:23 2001 http://www.mcafeeb2b.com/products/webshield-smtp/default.asp example:220 wsigate WebShield SMTP V4.5 MR1 Network Associates, Inc. Ready at Sun Jul 29 22:47:44 2001 McAfee Webshield ASaP is a combination hardware/software platform, basically consisting of a 1U Linux rackmount box with McAfee's filtering software http://www.mcafeeb2b.com/services/webshield-asap/faq.asp example: 220 smtp.foo.bar McAfee WebShield ASaP v1.0.1: Sun, 29 Jul 2001 22:46:18 -0700 example: 220 smtp.foo.bar McAfee VirusScreen ASaP v1.1: Sun, 20 Jul 2003 09:20:52 -0700 WinRoute Pro, runs on 9x/NT/2k http://www.tinysoftware.com/winpro.php example: 220 unspecified.host ESMTP - WinRoute Pro 4.0 ZMailer http://www.zmailer.org/technical.html example: 220 dedos.pert.com.ar ZMailer Server 2.99.54 #2 ESMTP ready at Tue, 6 Feb 2001 10:42:08 -0300 ZMailer server that supports IDENT Some simple PERL SMTP server example.com ESMTP Perl catch all for daemons that have no distinguishing fingerprint whatsoever example.com ESMTP example.com ESMTP Ready example.com SMTP example.com ESMTP Service ready