Exchange/MAPI/RPC

From: Joseph Burton (joseph_burton1970@hotmail.com)
Date: 03/08/03

  • Next message: benjurry@xfocus.org: "Worm.Dvldr analysis report" 
    From: "Joseph Burton" <joseph_burton1970@hotmail.com>
To: focus-ms@securityfocus.com
Date: Sat, 08 Mar 2003 17:07:31 +0100

    Hello all,

    I have a client that will soon start using Microsoft Exchange, and I have a
    question regarding the Outlook client. The Exchange client in Outlook uses
    the MAPI protocol which uses RPC to communicate with the Exchange server. I
    know it's not recommended to connect from the Internet using MAPI, without
    using any form av encryption like IPSec.

    My question is simply, why? Why is it dangerous to use MAPI/RPC over
    Internet? Is the password sent in clear text or something? I need some good
    arguments to convince my client to use VPN for the roaming users.

    Thanks in advance,

    //Joe

    _________________________________________________________________
    Skaffa fler messengerkontakter - Vinn 10.000 i resecheckar!
    http://messenger.msn.se/promo

  • Next message: benjurry@xfocus.org: "Worm.Dvldr analysis report"

    Relevant Pages

    • Re: Cannot login to retrieve internet mail
      ... You are correct in that when I connect with one of these accounts (that do ... not work) from an outlook client I am attemting to receive mail. ... > POP client - only the Exchange server for POP, ... > Internet - this is entirely different. ...
      (microsoft.public.exchange.admin)
    • Re: Client refusing incoming smtp messages
      ... Then don't mention the client & SMTP server. ... Is moxa.com your registered Internet domain? ... exchange server or anything else at that matter. ...
      (microsoft.public.exchange.clients)
    • Re: best way to recreate a mailbox
      ... >> some changes in PSS recently, so please take advantage of any request to ... I exhausted what I could do by phone and told the client, ... data loss can occur from running utilities against your Exchange ... >>> There is also a problem, likely related, with Backup Exec. ...
      (microsoft.public.windows.server.sbs)
    • Re: Managed By Tab
      ... you'd have to determine the GC the specific outlook client is using: ... The GC is located within an AD site that is directly connected to the Exchange server's AD site. ... In addition to site membership there is a preference for global catalog servers that are members of the same domain as the Exchange server. ... the referral process will now attempt to provide the Outlook client with a GC that belongs to the same domain as the mailbox-enabled user using a new algorithm. ...
      (microsoft.public.exchange.admin)
    • Re: Internal vs External Domains
      ... > I am planning an Windows 2003 Active Directory domain for a client ... > registered and has an active website on the Internet. ... > 4) What other Exchange issues should I be concerned about? ... Microsoft Windows MVP - Active Directory ...
      (microsoft.public.win2000.dns)