RE: Cell phone access to email

From: John Thornton (jthornton@hackersdigest.com)
Date: 08/22/01


To: vuln-dev@securityfocus.com
From: John Thornton <jthornton@hackersdigest.com>
Subject: RE: Cell phone access to email
Date: Wed, 22 Aug 2001 09:23:18 -0400
Message-ID: <jUsT.aNoTheR.mEsSaGe.iD.9984870357270@www.hackersdigest.com>


    It is probably filtering connections to port 110 of the exchange
server. I would assume that when the phone goes online it has a ip
address that is just part of a subnet that is allowed to connect
to the exchange server though the firewall. Either that or when the
phone goes online it is being routed though a machine that exists
behind the firewall.

    Most likely its the latter of the two. I'm sure that if you could
snag the phone's ip address it could be DoS with attacks such as
land, jolt, nestea, ping of death, and those types of attacks so
they would want to have the phones protected behind a firewall.

John Thornton - jthornton@hackersdigest.com
Editor in Chief
Hackers Digest - www.hackersdigest.com

John Thornton - jthornton@hackersdigest.com
Editor in Chief
Hackers Digest - www.hackersdigest.com

H A C K E R ' S D I G E S T
-----------------------------------------------------------------
#1 for propeller heads
-----------------------------------------------------------------
www.hackersdigest.com



Relevant Pages

  • Re: Unable to Receive Email from the internet
    ... Are you running this on Longhorn server? ... Test from outside your firewall: ... Exchange Server 2007: internet email without Edge ... looking at the firewall inbound rules on my LHS. ...
    (microsoft.public.exchange.setup)
  • Re: Open ports?
    ... You can't install Exchange without IIS. ... This server isn't going to be as secure as possible. ... >>> However, if this is your domain controller, putting a firewall between ...
    (microsoft.public.win2000.security)
  • Re: OMA?
    ... You would need to open up port 80 to the Exchange server only. ... > would I have to open up port 80 on my firewall, ...
    (microsoft.public.exchange.connectivity)
  • Re: SBS2008 - Exchange 2007 + Connection Control
    ... But then why not do it in Exchange if the facility is there to do it? ... as it will make troubleshooting a huge PITA. ... but the fact that you can't do this in your firewall should be ... Microsoft Exchange> Server Configuration> Hub Transport> ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS2008 - Exchange 2007 + Connection Control
    ... But then why not do it in Exchange if the facility is there to do ... but the fact that you can't do this in your firewall should ... Microsoft Exchange> Server Configuration> Hub Transport> ... Currently this would appear by default to permit connections ...
    (microsoft.public.windows.server.sbs)