RE: Securing Exchange Server

[Ben Winzenz]

Title: Message

Well, they are Fireproof walls, of course.  Who would leave their Exchange server sitting out on the street, unprotected.  Why, why, that almost borders on the inhumane!  No....they must be kept locked up, with no contact with the evil world outside.  We must protect them.  We are.........................................The Protectors of Exchange! [1]   [1]  OK - it is time for me to go home soon.   Ben Winzenz, MCSE Network/Systems Administrator Peregrine Systems   -----Original Message----- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 21, 2002 3:51 PM To: MS-Exchange Admin Issues Subject: RE: Securing Exchange Server   Whoa, Slow down Buck Rogers. What is one of these futuristic "firewalls" and where can a regular man get one? -----Original Message----- From: Ben Winzenz [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 21, 2002 12:43 PM To: MS-Exchange Admin Issues Subject: RE: Securing Exchange Server We use Firewalls to protect our Exchange systems from the outside world.   Ben Winzenz, MCSE Network/Systems Administrator Peregrine Systems   -----Original Message----- From: Manish Govindji [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 21, 2002 3:38 PM To: MS-Exchange Admin Issues Subject: Re: Securing Exchange Server   Sorry to ask but what do u use to secure exchange server..   we have about 400 users, and about 12 domains. ----- Original Message ----- From: Martin Blackstone To: MS-Exchange Admin Issues Sent: Thursday, February 21, 2002 11:32 PM Subject: RE: Securing Exchange Server   I was thinking the same thing. Heck, even Zonealarm or something just to hold you over. -----Original Message----- From: Ben Winzenz [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 21, 2002 12:23 PM To: MS-Exchange Admin Issues Subject: RE: Securing Exchange Server You can turn off unused/unwanted protocols under the Site, Configuration, Protocols, properties for each protocol.  This should render the ports inactive and unable to accept connections on them.  You can also do the same on a per server basis under the Server, Protocols, properties for each protocol.  This will cover the Exchange protocols only though.   I really think that if you are wanting to filter that many ports, you should look at a firewall.  Heck, even if it is a software firewall to start with.  It would be better than nothing.   Ben Winzenz, MCSE Network/Systems Administrator Peregrine Systems   -----Original Message----- From: William Lefkovics [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 21, 2002 3:14 PM To: MS-Exchange Admin Issues Subject: RE: Securing Exchange Server   Why no SSL? -----Original Message----- From: Manish Govindji [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 21, 2002 12:11 PM To: MS-Exchange Admin Issues Subject: Re: Securing Exchange Server Thanks for the reply.   Not for relay, but we do not have any firewall as yet, and i would like to close unecessary ports. Its a fresh installtion NT server PDC, Exchange 5.5. So all the ports are open. I just want 25, 110, 80 to be open.   I tried that on TCP/IP security and nobody could connect to mail server ....     ----- Original Message ----- From: Martin Blackstone To: MS-Exchange Admin Issues Sent: Thursday, February 21, 2002 11:02 PM Subject: RE: Securing Exchange Server   So are you saying someone used you as a relay or hacked your box or what?   Are you behind a FW? What ports are open to the Exch server? -----Original Message----- From: Manish Govindji [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 21, 2002 11:41 AM To: MS-Exchange Admin Issues Subject: Securing Exchange Server Hello,   I have tried many times but failed to secure Our Exchange Server. We have a Exchnage server for only   Server has NT4, IIS4, DNS.   How Do I use TCP IP security tab to configure security so that all the unnecessary ports are closed, we only use exchnage for POP3 and SMTP.   The last time I tried I got Max user limit .... on SMTP List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm List Charter and FAQ at: http://www.sunbelt-software.com/exchange_list_charter.htm