Well, I'll start with my standard response to this topic: SMTP != POP3 SMTP <> POP3 SMTP .ne. POP3
Now that that's out of the way, you don't let "inbound" POP access, you're allowing access to your mail server via POP3. Personally, I think that's not appropriate for most organizations, but for some it might be. It certainly isn't for ours, and I tend to disable POP3 on Exchange from the start. To address the attachments issue via POP, that's why my attachment filtering list is deployed both on our gateway mail servers, which manage both inbound and outbound mail as well as on the Exchange servers. With this scheme, all combinations of sender-recipient pairs are covered under the same attachment limitations. Roger -------------------------------------------------------------- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. > -----Original Message----- > From: Matt Plahtinsky [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 12, 2003 1:52 PM > To: Exchange Discussions > Subject: POP = Bad? -- SMTP = Good? > > > List, > > This might be more appropriate for a firewall/security list > but it involves email and I don't belong to one of those yet > so I'll post my question here. I'm curious as to how many of > your companies allow internal clients to access POP mail > externally. The reason I'm asking is because I see POP mail > as security risk. Let me explain. Our firewall strips all > but a few attachments from our incoming SMTP email. With POP > however attachments cannot be striped leaving a hole for new > virus that aren't detectable yet by our virus software. I'm > going to try to talk management into letting me block POP. > Is blocking incoming POP something other company do? Is > there some other way to secure incoming POP mail? > > Matt > > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t ext_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
