Volker Tanger wrote:
>
> [logging on to exchange machines via MAPI]
>
> For actual the MAPI connection alone - agreed. But IIRC you will have to
> authenticate against a proper NT Domain Controller. I always thought the
> _client_ will have to authenticate against the DC, so you will need an
> NBT connection - at least towards the DC. Please correct me if I am wrong
> here.
Mmmm no, that's not how the security model works. The client authenticates
to the mail server, which in turn asks the DC "is this user allowed to
log on, based on the credentials presented here?".
Good analog: Logging on to an IIS web server. You only need port 80.
--
Mikael Olsson, EnterNet Sweden AB, Box 393, S-891 28 �RNSK�LDSVIK
Phone: +46 (0)660 29 92 00 Direct: +46 (0)660 29 92 05
Mobile: +46 (0)70 66 77 636 Fax: +46 (0)660 122 50
WWW: http://www.enternet.se/ E-mail: [EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
