hi, do you guys know how to fingerprint a mail server?

i am up for a junior job with this department that manages the email systems and thought it might be a good idea to find out what they use and brush up on the manuals.

don't really want to run anything nasty on their server that might be construed as an attack. just want to find out what mail system they use. i am pretty sure it's not exchange but unix based.