RE: SMTP Service in private DMZ OK?

From: Jim Harrison (ISA) (jmharr_at_microsoft.com)
Date: 01/14/04

  • Next message: John LaCour: "application whitelisting (was RE: Active Directory Question)" 
    Date: Wed, 14 Jan 2004 07:57:35 -0800
To: "A. Bluecoat" <abluecoat@hotmail.com>, <focus-ms@securityfocus.com>

    Good question to ask before you deploy...
    You can start here:
    http://www.microsoft.com/technet/itsolutions/howto/admhow.asp?frame=true
    #i

    ..but specifically, you're looking for:
    http://support.microsoft.com/default.aspx?scid=kb;en-us;303776&sd=tech

    * Jim Harrison
    MCP(NT4/2K), A+, Network+
    Security Business Unit (ISA SE)

    "I used to hate writing assignments, but now I enjoy them.
    I realized that the purpose of writing is to inflate weak ideas,
    obscure poor reasoning, and inhibit clarity.
    With a little practice, writing can be an intimidating and
    impenetrable fog!"
    -Calvin
    -----Original Message-----
    From: A. Bluecoat [mailto:abluecoat@hotmail.com]
    Sent: Tuesday, January 13, 2004 15:14
    To: focus-ms@securityfocus.com
    Subject: SMTP Service in private DMZ OK?

    Hi all,

    What kind of trouble can I get into by installing the SMTP service on a
    W2K
    server in a private DMZ (double hop DMZ)? It'll be used for a web app.
    Can
    it be used as a relay? Is there some way to secure it? The box is
    already
    hardened to live in a DMZ. Thanks for any info.

    _________________________________________________________________
    Get a FREE online virus check for your PC here, from McAfee.
    http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: John LaCour: "application whitelisting (was RE: Active Directory Question)"