<?xml version='1.0' encoding='UTF-8'?>
<fingerprints protocol="smtp" database_type="service" preference="0.17">
  <!--
  SMTP response lines to the NOOP command are matched against these patterns
  (1 line at a time) to fingerprint SMTP servers.
  See comment at the top of smtp_banners.xml for additional info.
  'preference' note: This value has been set so as to implement the ordering
    of SMTP related fingerprint databases as described in 'smtp_banners.xml'.
  -->

  <fingerprint pattern="^220 OK">
    <description>CheckPoint FireWall-1 returns code 220 for NOOP command (instead of 250)</description>
    <param pos="0" name="service.vendor" value="Check Point"/>
    <param pos="0" name="service.family" value="Check Point"/>
    <param pos="0" name="service.product" value="Firewall-1"/>
    <param pos="0" name="service.cpe23" value="cpe:/a:checkpoint:firewall-1:-"/>
  </fingerprint>

  <fingerprint pattern="^250[ -]2.0.0 doing nothing$">
    <description>Eudora IMS - noop variant</description>
    <example>250 2.0.0 doing nothing</example>
    <param pos="0" name="service.vendor" value="Eudora"/>
    <param pos="0" name="service.family" value="Internet Mail Server"/>
    <param pos="0" name="service.product" value="Internet Mail Server"/>
    <param pos="0" name="os.vendor" value="Apple"/>
    <param pos="0" name="os.family" value="Mac OS"/>
    <param pos="0" name="os.product" value="Mac OS"/>
    <param pos="0" name="os.cpe23" value="cpe:/o:apple:macos:-"/>
  </fingerprint>

  <fingerprint pattern="^250[ -]Why is there an NOOP instruction\?$">
    <description>Alt-N MDaemon - noop variant</description>
    <example>250 Why is there an NOOP instruction?</example>
    <param pos="0" name="service.vendor" value="Alt-N"/>
    <param pos="0" name="service.family" value="MDaemon"/>
    <param pos="0" name="service.product" value="MDaemon"/>
    <param pos="0" name="service.cpe23" value="cpe:/a:altn:mdaemon:-"/>
    <param pos="0" name="os.vendor" value="Microsoft"/>
    <param pos="0" name="os.family" value="Windows"/>
    <param pos="0" name="os.product" value="Windows"/>
    <param pos="0" name="os.arch" value="x86"/>
    <param pos="0" name="os.cpe23" value="cpe:/o:microsoft:windows:-"/>
  </fingerprint>

</fingerprints>