RE: E-Mail gateway on IIS.

From: Burton Strauss (BStrauss3_at_comcast.net)
Date: 06/13/05

  • Next message: Mario Platt: "Re: RunAs" 
    To: "'Jitendra Kalyankar'" <jitendra.kalyankar@gmail.com>, <focus-ms@securityfocus.com>
Date: Mon, 13 Jun 2005 10:38:05 -0500

    Two separate boxes are two separate points of attack. One box is a single
    point, slightly more attractive to the bad guy.

    Two boxes mean both require the same OS patches and basic OS security
    (hardening).

    Either way, each service needs to be secured individually.

    It might be less disruptive to be able to reboot separately, or it may be
    easier to only need one reboot.

    Probably can go both ways depending on your personal preference.

    -----Burton

    -----Original Message-----
    From: Jitendra Kalyankar [mailto:jitendra.kalyankar@gmail.com]
    Sent: Monday, June 13, 2005 6:27 AM
    To: focus-ms@securityfocus.com
    Subject: E-Mail gateway on IIS.

    MS Gurus -

    I have on question about the e-mail gateway. I am working with this company
    where company has webserver as well as E-Mail gateway on the same server.
    Let me know if this will create any security risks. In other words is it
    recommanded that you need to have seperate webserver and e-mail gateway
    servers.

    Any inputs on this are highly appreciated. 

    --
Thanks,
Jitendra Kalyankar
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: Mario Platt: "Re: RunAs"