Greetings!
Frank Knobbe wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> > -----Original Message-----
> > From: Volker Tanger [mailto:[EMAIL PROTECTED]]
> > Sent: Tuesday, August 29, 2000 9:21 AM
> >
> > I hope you won't want to let them use MAPI via the internet?!
> > Because if so,
> > you will need to allow them NBT into the DMZ and to your DC
> > (read: NBT into
> > internal network). If so, a firewall won't help you much.
>
> Wrong. You don't need NetBIOS to connect with MAPI. Exchange uses
> three dynamic ports (Directory, Information Store, and Admin
> interface) which can be set to static ports with Registry settings.
> So you only need the Directory port, the Info Store, and the Remote
> Procedure port 135 to find these two ports (even when they are
> static) in order to connect with Outlook.
For actual the MAPI connection alone - agreed. But IIRC you will have to
authenticate against a proper NT Domain Controller. I always thought the
_client_ will have to authenticate against the DC, so you will need an
NBT connection - at least towards the DC. Please correct me if I am wrong
here.
Thanks
Volker
--
Volker Tanger <[EMAIL PROTECTED]>
--------------------------------------------
Sr. Security Engineer Tel. +49-69-92901-570
--------------------------------------------
Global One
Global Security
Global Service Engineering
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
