<?xml version='1.0' encoding='UTF-8'?>
<fingerprints protocol="smtp" database_type="service" preference="0.16">
  <!--
  SMTP response lines to the EXPN command are matched against these patterns
  (1 line at a time) to fingerprint SMTP servers.
  See comment at the top of smtp_banners.xml for additional info.
  'preference' note: This value has been set so as to implement the ordering
    of SMTP related fingerprint databases as described in 'smtp_banners.xml'.
  -->

  <fingerprint pattern="^500[ -]Syntax error, command &quot;XXXX.*&quot; unrecognized$">
    <description>Cisco PIX - changes the command letters to 'X' before passing them to the real SMTP server - expn variant</description>
    <param pos="0" name="os.vendor" value="Cisco"/>
    <param pos="0" name="os.family" value="PIX"/>
    <param pos="0" name="os.product" value="PIX"/>
    <param pos="0" name="os.cpe23" value="cpe:/o:cisco:pix_firewall_software:-"/>
  </fingerprint>

  <fingerprint pattern="^550[ -]EXPN not available to \(.+\) \[.+\] *$">
    <description>Exim - expn variant 1</description>
    <example>550 EXPN not available to (foo.bar.com) [192.168.0.1]</example>
    <param pos="0" name="service.vendor" value="exim"/>
    <param pos="0" name="service.family" value="exim"/>
    <param pos="0" name="service.product" value="exim"/>
    <param pos="0" name="service.cpe23" value="cpe:/a:exim:exim:-"/>
  </fingerprint>

  <fingerprint pattern="^550[ -]EXPN not available to [^ ]+ \(.+\) \[.+\] *$">
    <description>Exim - expn variant 2</description>
    <example>550 EXPN not available to evil.com (foo.bar.com) [192.168.0.1]</example>
    <param pos="0" name="service.vendor" value="exim"/>
    <param pos="0" name="service.family" value="exim"/>
    <param pos="0" name="service.product" value="exim"/>
    <param pos="0" name="service.cpe23" value="cpe:/a:exim:exim:-"/>
  </fingerprint>

  <fingerprint pattern="^500[ -]Don't you wish! *$">
    <description>GNAT box SMTP</description>
    <param pos="0" name="service.vendor" value="Global Technology Associates"/>
    <param pos="0" name="service.family" value="GNAT Box"/>
    <param pos="0" name="service.product" value="GNAT Box"/>
  </fingerprint>

  <!-- VM SMTP server doesn't like brackets in EXPN commands... -->

  <fingerprint pattern="^501[ -]Syntax Error\. Only ListId or Userid allowed as argument to this command *$">
    <description>IBM VM SMTP</description>
    <param pos="0" name="service.vendor" value="IBM"/>
    <param pos="0" name="service.family" value="VM"/>
    <param pos="0" name="service.product" value="VM"/>
  </fingerprint>

  <fingerprint pattern="^550[ -]lists are confidential *$">
    <description>Ipswitch IMail Server - expn variant</description>
    <example>550 lists are confidential</example>
    <param pos="0" name="service.vendor" value="Ipswitch"/>
    <param pos="0" name="service.family" value="IMail Server"/>
    <param pos="0" name="service.product" value="IMail Server"/>
    <param pos="0" name="service.cpe23" value="cpe:/a:ipswitch:imail_server:-"/>
  </fingerprint>

  <fingerprint pattern="^502[ -]command is not active$">
    <description>Alt-N MDaemon - expn variant</description>
    <example>502 command is not active</example>
    <param pos="0" name="service.vendor" value="Alt-N"/>
    <param pos="0" name="service.family" value="MDaemon"/>
    <param pos="0" name="service.product" value="MDaemon"/>
    <param pos="0" name="service.cpe23" value="cpe:/a:altn:mdaemon:-"/>
    <param pos="0" name="os.vendor" value="Microsoft"/>
    <param pos="0" name="os.family" value="Windows"/>
    <param pos="0" name="os.product" value="Windows"/>
    <param pos="0" name="os.arch" value="x86"/>
    <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
  </fingerprint>

  <fingerprint pattern="^252 Unable to EXPN &quot;.*&quot;, but will accept message and attempt delivery *$">
    <description>Lotus Domino</description>
    <param pos="0" name="service.vendor" value="Lotus"/>
    <param pos="0" name="service.family" value="Lotus Domino"/>
    <param pos="0" name="service.product" value="Lotus Domino"/>
    <param pos="0" name="service.cpe23" value="cpe:/a:ibm:lotus_domino:-"/>
  </fingerprint>

  <fingerprint pattern="^550[ -]Unable to find list '.*'\.$">
    <description>Seattle Labs SLMail</description>
    <example>550 Unable to find list 'list'.</example>
    <param pos="0" name="service.vendor" value="Seattle Labs"/>
    <param pos="0" name="service.family" value="SLMail"/>
    <param pos="0" name="service.product" value="SLMail"/>
  </fingerprint>

</fingerprints>