RE: Exchange/MAPI/RPC

From: shannong (shannong@texas.net)
Date: 03/11/03

  • Next message: Pidgorny, Slav: "RE: Exchange/MAPI/RPC" 
    From: "shannong" <shannong@texas.net>
To: "'Chris Norris'" <cnorris@continental-microwave.co.uk>, <focus-ms@securityfocus.com>
Date: Tue, 11 Mar 2003 15:59:09 -0600

    Actually, what Chris has setup is what is recommended in general.
    Exchange is not being made accessible to the Internet. ISA was made
    available to the Internet. Only authenticated users can access Exchange
    through the ISA server. Using some form of access-control is
    recommended for all services exposed to the Internet when possible.
    This mitigates a lot of the problems and concerns.

    -Shannon

    -----Original Message-----
    From: Chris Norris [mailto:cnorris@continental-microwave.co.uk]
    Sent: Tuesday, March 11, 2003 1:52 AM
    To: focus-ms@securityfocus.com
    Subject: Re: Exchange/MAPI/RPC

    I use Microsoft ISA server and use the techniques described on
    isaserver.org
    to publish MAPI/RPC for Exchange 2000.
    It's simple, safe, secure - my only gripe is it's a bit slow.
    I have run countless security attacks using all the available tool(z)
    and
    have yet to read about a vulnerability using ISA/Exchange in this way.

  • Next message: Pidgorny, Slav: "RE: Exchange/MAPI/RPC"

    Relevant Pages

    • ISA und OWA: Zugriff von außen
      ... auf unserem Server läuft SBS2000, also auch IIS5, ISA und Exchange. ... und mit fester öffentlicher IP) ans Internet angeschlossen. ... und wird vom ISA an Port 81 überbrückt. ...
      (microsoft.public.de.german.isaserver)
    • Re: ISA and Exchanger Server 2000 - - Cant create (user) output Error
      ... How to Use the Internet Connection Wizard in Small Business ... After configuring exchange ... > I then tackled ISA Server. ...
      (microsoft.public.backoffice.smallbiz2000)
    • Re: ISA and Exchange 2003 OWA and RPC over HTTPS
      ... Can ISA be configured to proxy all client connections from the ... Internet like a front-ent exchange ... > I would like to put ISA in our DMZ to proxy RPC/HTTPS, ...
      (microsoft.public.isa)
    • Re: ISA and Exchange 2003 OWA and RPC over HTTPS
      ... Can ISA be configured to proxy all client connections from the ... Internet like a front-ent exchange ... > I would like to put ISA in our DMZ to proxy RPC/HTTPS, ...
      (microsoft.public.exchange.setup)
    • Re: RWW - Cant login
      ... Premium and ISA. ... In the Microsoft Internet Security and Acceleration Server 2004 ... In the center pane, find a policy named SBS Internet Access Rule, ...
      (microsoft.public.windows.server.sbs)