Re: MS02-18 causes Exchange problems ??

From: jmcguire@sbcs.com
Date: 05/21/02 

To: Ben Beyeler <bbeyeler@citidc.com>
From: jmcguire@sbcs.com
Date: Tue, 21 May 2002 10:28:53 -0400

I have this same configuration running at a customer site without the MAPI
through the Internet. Haven't seen any problems, but the MAPI through the
Internet is your issue. Use VPN or OWA, keep the web server patched up and
save yourself a lot of grief.

__________________________________________
JOHN MCGUIRE CISSP, MCSE2k, MCSE+I, MCT
888.529.0401
jmcguire@sbcs.com
Strictly Business
 www.sbcs.com

                                                                                                            
                    Ben Beyeler
                    <bbeyeler@citi To: focus-ms@securityfocus.com
                    dc.com> cc:
                                         Subject: MS02-18 causes Exchange problems ??
                    05/20/2002
                    03:17 PM
                                                                                                            
                                                                                                            

Anyone else had problems with MS02-18 affecting Exchange 2000?

Our Exchange server is W2K SP2, Exchange 2000 SP2. It is also running
NAVCE,
NAV for Exchange 2.5 and OWA.

Some remote users access the Exchange server with Outlook 2000 directly
across the Internet. (we use the LMHOSTS file to achieve this) Yes, we know
there are security issues with this method. These users can no longer
access the Exchange server this way. We belive Outlook can authenticate
properly because we can use the "Check Name" feature in the Outlook
profile.
It prompts for a username and password and looks up the proper username.
When Outlook is run, it asks for a password and then just waits there until
it times out.

I have rebooted our router/firewall, disabled the firewall temporarily,
rebooted the server, uninstalled the patch, and stopped the NAV for
Exchange
service. Non of these seem to work.

Anyone else seen similar problems?
-Ben

Relevant Pages

  • Re: Exchange PLUS POP3
    ... configuring the POP3 Locally. ... it shows blocked by the SBS Internet Users rule. ... their mail servers so if our Exchange server goes down we can log onto ... Outlook pointing to the ISP POP and SMTP servers and all he has to do ...
    (microsoft.public.windows.server.sbs)
  • Re: Outlook Web Access
    ... FYI, POP3 and IMAP4 are client retrieval protocols, such as if you were using Comcast, Verizon, and many others, and you would setup Outlook or Outlook Express to receive mail using POP3. ... Now if your Exchange server is truly receiving and sending mail for your company on the internet, then you must already have an MX record created in your public DNS zone. ...
    (microsoft.public.windows.server.sbs)
  • Re: New SBS 2003 install - incoming e-mail not working.
    ... Microsoft Outlook 2000 has three different installation options. ... Outlook Setup will attempt to detect whether you should be using Internet ... Application Programming Interface (MAPI) services, ...
    (microsoft.public.windows.server.sbs)
  • Re: Exchange PLUS POP3
    ... We even use RPC over http so our users can use Outlook from home. ... configuring the POP3 Locally. ... it shows blocked by the SBS Internet Users rule. ... their mail servers so if our Exchange server goes down we can log ...
    (microsoft.public.windows.server.sbs)
  • Re: Outlook Anywhere
    ... My exchange server name is EXCH. ... I've configured Outlook 2007 to ... I also can access OWA over the internet from outside our LAN using ... Outlook anywhere in the Exchange server using EXCH.EXTDOMAIN.COM as my ...
    (microsoft.public.exchange.connectivity)