Re: Exchange 2000 - Port 80

From: Andrew Mitchell (amitchel_at_removecasey.vic.gov.au)
Date: 03/17/04

  • Next message: Ben Blackmore: "Re: Security Template Problems"
    Date: Wed, 17 Mar 2004 00:52:33 -0800
    
    

    Andrew Mitchell <amitchel@removecasey.vic.gov.au> said

    > "Sam Ramsey" <anonymous@discussions.microsoft.com> said
    >
    >> I have an Exchange 2000 with all the latest patches and
    >> IIS lockdown loaded. I have a Cisco firewall and allowing
    >> only port 25 and 80 on the outside IP address.
    >>
    >> External hackers are connecting to port 80 and accessing
    >> porn sites thru my exchange server. It seems like they are
    >> using my exchange server as proxy server. I am using
    >> Active Ports to monitor the ports on the exchange server
    >> and notice them connecting to port 80. I also have web
    >> monitoring software and notice the traffic to the porn
    >> sites on the exchange server. Is this a known problem with
    >> Exchange 2000? I dont think it is a problem with the
    >> firewall because I need to allow port 80 for OWA.
    >
    > It *is* a problem with your firewall config.

    That should read it is *partially* a problem with the firewall.
    There are obviously other problems here but the outgoing port 80 access is
    the easiest one to fix.


  • Next message: Ben Blackmore: "Re: Security Template Problems"

    Relevant Pages

    • Re: Outlook Problem with Exchange
      ... So we rebooted our main firewall last night to no avail. ... could comminute with Exchange slightly but not all the way. ... -RDP to Exchange Server ... The connection to the GC for Directory access, ...
      (microsoft.public.exchange.applications)
    • Re: VPN-Zugrigg auf Ex2k schlägt fehlt
      ... >> Exchange freigegeben: ... That's TCP port 135 on Exchange servers and domain controllers. ... > It saves us from having to go to the Exchange server and having the ... > Public folder servers are very important because a client may have to get ...
      (microsoft.public.de.exchange)
    • Re: VPN-Zugrigg auf Ex2k =?ISO-8859-15?Q?schl=E4gt_fehlt?=
      ... That's TCP port 135 on Exchange servers and domain controllers. ... It saves us from having to go to the Exchange server and having the Exchange server proxy. ... This is going to be on DCs and Exchange servers, whichever one the client decides to use. ...
      (microsoft.public.de.exchange)
    • Re: SBS 2003, Outlook 2003, and RPC-HTTP
      ... Firewall won't matter as long as it's passing 443 traffic. ... exchange server by it's internal name? ... Under the Exchange Proxy settings in Outlook, ...
      (microsoft.public.windows.server.sbs)
    • Re: Newbie question... Exchange 2003 queued messages
      ... Figure out what's blocking the port 25 traffic. ... MVP - Exchange ... Then telnet to port 25 of the mail server servicing this domain's mail as ... The server is behing a firewall, ...
      (microsoft.public.exchange.admin)