Hello,

I would rather not have Xeams in Proxy mode reply to an invalid user with the response:

550 No such user here - AD

Can it be modified to simply say something like the Cisco Ironport::

550 #5.1.0 Address rejected.

In my opinion it will offer less incentive to hunt for AD accounts and providing the least amount of information possible is a better security alternative.

FYI, I have already hidden the header response for the Xeams version in the 220 response for the same reason:

220 mail.********.com - Version info hidden due to policy

Thanks in advance
Jason

Jason,

We will add this in our to-do list.

BTW, you don't want to use the Proxy server for inbound emails. A malicious user could send an AUTH command through Xeams to guess passwords on your Exchange. Check https://www.xeams.com/switchingproxy2regular.htm for details.

Thanks for the update!

In order to combat malicious user logins I use Syspeace to protect the Exchange Server from both SMTP Auth and OWA logins. :)