Re: Member Server Login Slow DMZ-Internal Subnet

From: Enkidu (enkidu_at_cliffp.com)
Date: 05/04/03

  • Next message: RonS: "Stumped! 2 users 1 folder - Mutual read, exclusive write?" 
    Date: Sun, 04 May 2003 11:59:54 +1200

    On Fri, 2 May 2003 21:13:02 -0400, "Ace Fekay [MVP]"
    <PleaseSubstituteMyFirstName&LastNameHere@hotmail.com> wrote:

    >In news:Osgcj#KEDHA.432@TK2MSFTNGP12.phx.gbl,
    >Steve K. <skonde@hotmail.,com> posted his concerns then I replied down
    >below:
    >>> No, since your DNS configuration seems to be ok, you better check
    >>> the subnet to site mapping issue. Though usually it is not
    >>> recommended placing domain members in DMZ. In this case if "bad
    >>> guys" get access to that server, they will automatically get some
    >>> access across your domain. If you do not need to host any services
    >>> which require AD connectivity, you better use stand-alone servers in
    >>> DMZ.
    >>
    >> Sure would have been nice if Microsoft didn't require Exchange
    >> locally on the server hosting Outlook Web Access...but I guess they
    >> needed the money from the extra licenses!
    >
    >It's actually because of Exchange 2k's requirements of IIS. Ex55 didn't
    >require IIS, so that was why that option was available in that version.
    >
    I'm not sure what you mean here, Ace. Win2K server comes with IIS, and
    I'm not sure what that has to do with requiring E2K on the OWA server.
    Could you expand a bit on what you mean?

    Cheers,

    Cliff
    --

    Signed and sealed with Great Seal of the Executive
    Council of the Internet, by The Master of The Net.

  • Next message: RonS: "Stumped! 2 users 1 folder - Mutual read, exclusive write?"

    Relevant Pages

    • [NT] Heap Overrun in HTR Chunked Encoding Could Enable Web Server Compromise
      ... This patch eliminates a newly discovered vulnerability affecting Internet ... in IIS 4.0 and 5.0, and could likewise be used to overrun heap memory on ... allowing code to be run on the server. ... * Microsoft has long recommended disabling HTR functionality unless there ...
      (Securiteam)
    • Re: Problem with connect computer wizard
      ... Make sure the Windows XP client is pointing to the SBS 2003 server as ... Please collect the IIS metabase and the latest IIS log files further ... This newsgroup only focuses on SBS technical issues. ...
      (microsoft.public.windows.server.sbs)
    • RE: IIS Key pairs (how to export an IIS 4.0 self-issued Root CA a nd import into new IIS 4.0 box)
      ... IIS key to an Intel SSL acelerator ... it issues client certificates to the end users. ... Step I - Installing the New Server ... Install NT SP 3 ONLY ...
      (Focus-Microsoft)
    • Re: SBS 2003 After Service Pack 1 for SBS
      ... we can conclude the SBS 2003 SP1 has been applied ... Please help me collect the IIS metabase to check ... and using server management console to reproduce the problem. ... This newsgroup only focuses on SBS technical issues. ...
      (microsoft.public.windows.server.sbs)
    • FW: Microsoft Security Advisory MS 03-007
      ... am trying to find a vulnerability tester/script and I could test it out ... Department of the Army server that had been compromised and that this ... announcement covers IIS 5.1 but not IIS 6, ... How a Hacker Uses SQL Injection to Steal Your SQL Data! ...
      (Focus-Microsoft)