Re: [fw-wiz] Outlook Web Access - Paranoid?

From: Devdas Bhagat (dvb@users.sourceforge.net)
Date: 12/01/02 

From: Devdas Bhagat <dvb@users.sourceforge.net>
To: Matt Wilbur <matt@efs.org>
Date: Sun Dec  1 03:03:14 2002

On 30/11/02 11:39 -0800, Matt Wilbur wrote:
<snip>
> If you just need to give end users access to email and email directory
> services from the outside, why not use one of the many "webmail"
> applications out there, all of which need far less access to your
> internal networks. You could plunk, for example, squirrelmail out on a
> DMZ system, allow port 143 (IMAP) and port 389 (LDAP) to an exchange
I would suggest imaps(993) and ldaps(636). If your webmail client
doesn't support that, zebeedee or stunnel could help in creating the SSL
connections.
No use running plain text all over the place when SSL certificates are
free.

Devdas Bhagat