[EMAIL PROTECTED] wrote:
>
> I have an exchange server. Users want to check email from home and on
> the road.
> What are the security cautions I should no about. Why wouldn't this be
> a good idea if I have
> file sharing on the same system? Are pop3 passwords sent in clear text?
Yes, everything in POP3 is sent in plain text. Do this, and anyone can
get hold of your DOMAIN users and passwords. Having this information, they
could easily attach to any domain resources, if allowed by your firewall.
(I hope your firewall blocks ports 135-139 inbound?)
Even if your domain resources are protected, remember that there's usually
a lot of sensitive information in your mailboxes. Do you want everyone
to be able to read your mail? (No, didn't think so.)
Your best bet is probably to use pop3s (pop3 via SSL) or imap4s.
Exchange supports it, and I know that the Netscape mail client does too.
I'm ready to bet that Outlook supports it aswell, but I haven't looked
myself.
--
Mikael Olsson, EnterNet Sweden AB, Box 393, SE-891 28 �RNSK�LDSVIK
Phone: +46-(0)660-29 92 00 Fax: +46-(0)660-122 50
Mobile: +46-(0)70-66 77 636
WWW: http://www.enternet.se E-mail: [EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
