> In this particular case the customer's branch office uses a cable modem
> connection with a dynamic IP address. I've told them that they will at
least
> need to get a static IP for me to "relay for addresses". The copier guy
> asked if I could instead allow for relaying by MAC address. I've never
heard
> of that being a feature of ANY mail server, and probably for good reason.
We
> all know just how well that security method works for wireless networks!
> Unfortunately, it looks like I am being made out to be the bad guy for not
> allowing open relay for the entire internet.
> 
> This particular machine is a Konica. It sounds like none of these copier
> companies knows how to make a machine that is truly "internet ready". I
can
> only imagine how bad the security must be on these things. I guess that
they
> broadcast their web interface on port 80 with no restrictions as well. For
> all I know, their copier could wind-up becoming a zombie for someone's
spam
> factory, which makes me extremely reluctant to let them interface to my
mail
> server at all. Maybe I am just being paranoid, but if I weren't paranoid,
I
> don't think that I'd be a very good network administrator. :-)

Used to be, not sure if it is still true, that Xerox document centers run by
a Windows NT 4.0 server were configured so that every one had full admin
rights on the box. This would be the same box where jobs were stored. True
story that happened at a major national printing company with franchises all
over the place: The graphics department spent hours and hours creating
things to be printed. They would then print proofs on the Docu Centre. A
major client KNEW about the Xerox configuration. That client rejected the
proof and canceled the job. A week later, the printing centers competitor
delivered the job to that same client. That major printing center was
networked using a simple router and all public IP addresses. The competitor
browser right in and "stole" the data files for the job.

That took place about 4 years ago. As of about 18 months ago, Xerox was
still saying it was solely the printing centers fault.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You



To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to