RE: POP3

From: Nick (bombdudeusmc@yahoo.com)
Date: 02/28/02 

From: "Nick" <bombdudeusmc@yahoo.com>
To: "Ferguson, Scott" <sferguson@rfbd.org>, <shady@netway.at>
Date: Wed, 27 Feb 2002 20:57:35 -0500

I'm not sure I follow. If we are talking about users connecting from the
'Net and retrieving their mail, then my suggestion for Shady would be to
look at OWA, or set up POP server(s) in a DMZ with user accounts that
retrieve email from the main Exchange server on the inside.

The part that confuses me, is the part about controlling attachments. If
you have users getting their mail from the 'Net, how are you going to have
less control over attachments? It all has to come across the Exchange
server anyway, right? It can still scan/detach "dangerous" attachment file
types. If we were talking about users going outbound from the intranet,
blocking POP3 wouldn't stop them from getting attachments via Hotmail.

I know I must be missing something obvious here, Scott, please clue me in.

Nick
Network Security Consultant
CISSP, CCSI, MCSE, CCNA
Raleigh, NC

-----Original Message-----
From: Ferguson, Scott [mailto:sferguson@rfbd.org]
Sent: Monday, February 25, 2002 1:46 PM
To: shady@netway.at
Cc: security-basics@securityfocus.com
Subject: RE: POP3

we took pop3 away from our users not long ago due to virus concerns,
technically the desktop software will scan attachments/emails if configured
properly, but we like to control the specific types of attachments they
can/cannot receive and scan all mail at the server level first

-----Original Message-----
From: shady@netway.at [mailto:shady@netway.at]
Sent: Saturday, February 23, 2002 5:00 PM
To: security-basics@securityfocus.com
Subject: POP3

My users want me to to give them POP3 access via

the firewall. We have an Exchange Server runnig with

a Checkpoint Firewall. Are there any security issues

that I need to watch out


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com

Relevant Pages

  • FW: POP3
    ... Subject: POP3 ... retrieve email from the main Exchange server on the inside. ... is the part about controlling attachments. ... but we like to control the specific types of attachments they ...
    (Security-Basics)
  • Attachment sending problems
    ... We are having some strange problems when sending Excel attachments to ... Symantec MSE on the Exchange server, ...
    (microsoft.public.exchange.clients)
  • Re: Problem with attachments and OWA at the user end
    ... Unfortunately I know nothing about the Exchange Server. ... problem of attachments failing to attach using OWA. ... months no one had a single problem with attachments of any size. ... this point the below error message is generated for everyone. ...
    (microsoft.public.exchange.clients)
  • Re: Problem with attachments and OWA at the user end
    ... Unfortunately I know nothing about the Exchange Server. ... message did show the OWA version: ... User laptops are running WinXP Prof Version with all updates including SP2. ... had a single problem with attachments of any size. ...
    (microsoft.public.exchange.clients)
  • Re: Outlook Express missing ALL attachments.
    ... >The ms-tnef is the clue that the message was prepared ... using Outlook (NOT ... >attachments, you can try this link, but the best way is ... the Exchange server actually removes the ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)