Dang, ain't much that can't be accessed. FTP is not there, nor is a web server, but hey, with 135 and 139 there are possibilities.
Perhaps you should considering hiring a security consultant to go over your current setup? *cough*personal plug*cough* -----Original Message----- From: Chris Scharff [mailto:[EMAIL PROTECTED]] Sent: Thursday, January 09, 2003 11:23 AM To: Exchange Discussions Subject: Re: Access to Exchange Server Why wouldn't they be able to access the server given the open ports?[1] Here's a list of your currently open ports... Open Port: 25 Open Port: 27 Open Port: 110 Open Port: 119 Open Port: 135 Open Port: 139 Open Port: 143 Open Port: 389 Open Port: 445 Open Port: 563 Open Port: 593 Open Port: 636 Open Port: 993 Open Port: 995 Open Port: 1030 Open Port: 1032 Open Port: 1035 Open Port: 1037 Open Port: 1041 Open Port: 1043 Open Port: 1047 Open Port: 1049 Open Port: 1051 Open Port: 1053 Open Port: 1069 [1] Should be using VPN to access. On 1/9/03 8:03, "Cooke, Brian" <[EMAIL PROTECTED]> wrote: See that's what I thought as well. I even opened up a ticket with Cisco and went through our entire settings and they couldn't find any holes that would be allowing this type of access. Brian Cooke Systems Administrator U.S. Inspect -----Original Message----- From: Ed Crowley [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 08, 2003 11:20 PM To: Exchange Discussions Subject: RE: Access to Exchange Server You mean they can get in from the Internet? Your firewall is misconfigured. Ed Crowley MCSE+I MVP Technical Consultant hp Services "There are seldom good technological solutions to behavioral problems." -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Cooke, Brian Sent: Wednesday, January 08, 2003 1:03 PM To: Exchange Discussions Subject: Access to Exchange Server I have a problem with access to our Exchange server. We are using Exchange 5.5 and have just migrated from NT 4.0 to Win2K Advanced server. The old server was also the PDC and it still is. Recently I realized that anyone with Outlook and internet access can access the server as long as they know the name or IP adress of the server, can authenticate to our PDC, and there is a mailbox for that user. This did not happen with our old server. We use a PIX 520 firewall so I contacted Cisco and they seem to think our firewall config is correct. Both the PDC and the Exchange server have external IP addresses and there is an mx record for the Exchange server. Anyone got any ideas? Thanks in advance, Brian _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
