RE: DCOM patch + Exchange

From: Grewal, Jaideep (Jaideep.Grewal_at_cda.canon.com)
Date: 08/19/03

  • Next message: focus-ms_at_securityfocus.com: "{Virus?} Re: Details"
    Date: Tue, 19 Aug 2003 10:53:10 -0700
    To: "Steven McCauley" <steven.mccauley@au.faulding.com>
    
    

    Is your firewall set to block port 135 after the Blaster Worm attack ?
    May be referring to the following knowledge base article be of some
    help.

    http://support.microsoft.com/default.aspx?scid=http://support.microsoft.
    com:80/support/kb/articles/Q150/5/43.asp&NoWebContent=1

    -----Original Message-----
    From: Steven McCauley [mailto:steven.mccauley@au.faulding.com]
    Sent: Monday, August 18, 2003 9:45 PM
    Cc: focus-ms@securityfocus.com
    Subject: Re: DCOM patch + Exchange

    We have the same issue. Our Exchange server is configured to Dial out
    an pick up mail every half an hour. It still dials out but can no
    longer retrieve E-mail and External users cannot even initiate a telnet
    session on port 25 to the server.

    --
    Thanks
    Steven McCauley
    Help Desk Administrator & Desktop Support,  Virginia
    PCOE System's Administrator
    Mayne Consumer IT
    (07) 3212 8777
    Jacob Loveless wrote:
    >Same here. Exchange unavailable to remote users: behind ISA, in front
    of
    >ISA. No difference. Only works within the VPN.
    >
    >-----Original Message-----
    >From: Michael Schneider [mailto:MSchneider@n2bb.com] 
    >Sent: Thursday, August 14, 2003 5:10 PM
    >To: focus-ms@securityfocus.com
    >
    >We are experiencing the same issues. We had thought it might be the ISP
    >blocking the ports to stop the spread of the worm because we can access
    >exchange if we use our VPN but not without.
    >
    >Michael Schneider
    >Systems Administrator
    >N2 Broadband
    > 
    >678.812.6337 direct
    >404.542.8952 mobile
    >678.812.6437 fax
    >www.n2broadband.com
    > 
    >
    > 
    > 
    >-----Original Message-----
    >From: Tim Mektrakarn [mailto:tim@loudpacket.com] 
    >Sent: Thursday, August 14, 2003 1:49 PM
    >To: focus-ms@securityfocus.com
    >Subject: DCOM patch + Exchange
    >
    >Anyone experience any problems with the DCOM patch and the ability for
    >external users to connect to a patched exchange server? Internal users
    >have no problems.
    > 
    >Tim
    >
    >
    >
    >-----------------------------------------------------------------------
    -
    >---
    >Your network firewall and IDS products do not prevent Web application 
    >attacks - the most common form of online exploitation- resulting in Web
    >defacement, data theft, sabotage and fraud.
    >KaVaDo is the only company that provides a complete suite of Web 
    >application security products.
    >Download a FREE whitepaper on "Security Policy Automation for Web
    >Applications":http://www.securityfocus.com/Kavado-focus-ms
    >-----------------------------------------------------------------------
    -
    >---
    >
    >
    >
    >
    >-----------------------------------------------------------------------
    ----
    >KaVaDo provides the first and only integrated Web application scanner
    and 
    >firewall security suite that prevent Web applications attacks, the most
    >common form of online exploitation. Download a FREE whitepaper on
    Security Policy Automation for Web Applications. 
    >http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818 
    >-----------------------------------------------------------------------
    ----
    >
    >
    >  
    >
    -- 
    ------------------------------------------------------------------------
    ---
    KaVaDo provides the first and only integrated Web application scanner
    and 
    firewall security suite that prevent Web applications attacks, the most 
    common form of online exploitation. Download a FREE whitepaper on
    Security Policy Automation for Web Applications. 
    http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818 
    ------------------------------------------------------------------------
    ---
    ---------------------------------------------------------------------------
    KaVaDo provides the first and only integrated Web application scanner and 
    firewall security suite that prevent Web applications attacks, the most 
    common form of online exploitation. Download a FREE whitepaper on Security Policy Automation for Web Applications. 
    http://www.securityfocus.com/sponsor/KaVaDo_focus-ms_030818 
    ---------------------------------------------------------------------------
    

  • Next message: focus-ms_at_securityfocus.com: "{Virus?} Re: Details"

    Relevant Pages

    • Re: DCOM patch + Exchange
      ... We don't run exchange, but doesn't it use port 445 or something like ... Security Policy Automation for Web Applications. ... firewall security suite that prevent Web applications attacks, ...
      (Focus-Microsoft)
    • RE: Limiting users on secific machines that are part of a domain
      ... firewall security suite that prevent Web applications attacks, ... common form of online exploitation. ... Security Policy Automation for Web Applications. ...
      (Focus-Microsoft)
    • RE: Disabling sharing and group policies
      ... firewall security suite that prevent Web applications attacks, ... Download a FREE whitepaper on Security Policy Automation for Web Applications. ...
      (Focus-Microsoft)
    • Re: Disabling sharing and group policies
      ... > I'm looking for a solution to keep honest people honest.. ... firewall security suite that prevent Web applications attacks, ... Download a FREE whitepaper on Security Policy Automation for Web Applications. ...
      (Focus-Microsoft)
    • Article Announcement: MRTG for Intrusion Detection with IIS 6
      ... This article explains how to use a Multi Router Traffic Grapher (MRTG) to ... firewall security suite that prevent Web applications attacks, ... Download a FREE whitepaper on Security Policy Automation for Web Applications. ...
      (Focus-Microsoft)