RE: publications concerning port forwarding


On Wed, 11 Apr 2007, Wiedemann, Adrian wrote:

------=_NextPart_000_0009_01C77C1F.25A6FE80
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi,

to forward ports on the PIX from the Internet to internal servers. I
have
explained that port forwarding is very risky but they don't seem to
understand. Are there any publications that can be used to show the

It boils down to the Exchange-Server setup. If he is using a
frontend-backend Exchange configuration and requests port 443 to be
forwarded, I see no inherent security concerns about this. In general, I see
no security implications about forwarding ports. I just depends on the
servers, on which these ports are forwarded to.

Regards, Adrian

Ret


My concern would be a 0-day exploit for the service that is exposed. An
internal MS Exchange server responding to public internet traffic, seems
less secure than say... a postfix server in the DMZ and a MS Exchange
server on the internal network.at least in this situation you would need
two services to be exploitable (Postfix SMTP and MS Exchange) rather than
just MS Exchange.

Is this an over paranoid stance? What if the company falls under
"Executive Order on Critical Infrastructure Protection"?

-Jason Ellison

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------

Relevant Pages

  • RE: DNS and Exchange issues
    ... with the Exchange Server after you have installed the patch 888619. ... XFOR: Telnet to Port 25 of IMC to Test IMC Communication: ... Start Exchange System Manager. ... Port 21 enables external and internal file transfer ...
    (microsoft.public.windows.server.sbs)
  • RE: Email Rules Forwarding and Fax Forwarding Not Working
    ... In Exchange 2003, "Allow automatic forward" is disabled by default. ... On the SBS server, ... Microsoft CSS Online Newsgroup Support ... Email Rules Forwarding and Fax Forwarding Not Working ...
    (microsoft.public.windows.server.sbs)
  • Re: MSADC 8355 LDAP Result failed
    ... I receive 2 when the server restarts. ... Event Category: LDAP Operations ... Opening LDAP session to directory xxx on port 389. ... If you put Exchange on one, ...
    (microsoft.public.exchange.setup)
  • Re: ConfigDSInteg error
    ... Agreement to point to the new Exchange 2003 server is so that it will have ... You would also change the port ... Any ADC connection agreements configured to point to the SRS would need to ...
    (microsoft.public.exchange.setup)
  • Re: ConfigDSInteg error
    ... Agreement to point to the new Exchange 2003 server is so that it will have ... You would also change the port ... Any ADC connection agreements configured to point to the SRS would need to ...
    (microsoft.public.exchange.admin)