RE: POP3 bad?
But if he already wants to shut it off anyway, why does he need to be convinced to do so? :) -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 3:24 PM To: Exchange Discussions Subject: RE: POP3 bad? Is it not a best practice to 'shut off' any network entry/access point that you aren't explicitly using? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Andrey Fyodorov Sent: Wednesday, February 05, 2003 12:10 PM To: Exchange Discussions If he already wants to shut it off why does he need any reasons? -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
I get it. The manager needs to have his a55 covered in case *his* higher level manager wants to chew it off when he can't use Outlook Express from home. :) -Original Message- From: Andrey Fyodorov Sent: Friday, February 07, 2003 5:06 PM To: Exchange Discussions Subject: RE: POP3 bad? But if he already wants to shut it off anyway, why does he need to be convinced to do so? :) -Original Message- From: William Lefkovics [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 3:24 PM To: Exchange Discussions Subject: RE: POP3 bad? Is it not a best practice to 'shut off' any network entry/access point that you aren't explicitly using? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Andrey Fyodorov Sent: Wednesday, February 05, 2003 12:10 PM To: Exchange Discussions If he already wants to shut it off why does he need any reasons? -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: POP3 bad?
Reason: Customer would like to shut it off. - Original Message - From: Tony Hlabse [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Wednesday, February 05, 2003 10:09 AM Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
Well its always a bad idea in general security terms to run processes when you have no need to use them; why open yourself up to the potential of an exploit in something you don't have to use when you can just close it down and forget the risk? Why risk forgetting you need to apply a patch for it because We don't use that here so we don't need to worry about it (case in point would be those MSDE 2000 installs that got hit by slammer whose users didn't worry because they didn't use SQL Server 2000). Having it running when you don't use it is just more ways for things to go wrong -- for example a user connects to it while playing and downloads mail via pop, which deltes it from the server, and then complains they've lost their email. Why waste the server's resources on a process you don't expect to use. Robert Moir MSMVP IT Systems Engineer Luton Sixth Form College Ciderspace: An online 3D virtual reality environment for tramps. Ciderspace Cafe: A park Bench. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: 05 February 2003 15:10 To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
At our site it's our policy that we purge all email 30 days and older. We don't want people downloading mail to their home computers at the risk of breaking that policy. That may not be applicable to your site, but that is one reason. Aaron -Original Message- From: Robert Moir [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 7:56 AM To: Exchange Discussions Subject: RE: POP3 bad? Well its always a bad idea in general security terms to run processes when you have no need to use them; why open yourself up to the potential of an exploit in something you don't have to use when you can just close it down and forget the risk? Why risk forgetting you need to apply a patch for it because We don't use that here so we don't need to worry about it (case in point would be those MSDE 2000 installs that got hit by slammer whose users didn't worry because they didn't use SQL Server 2000). Having it running when you don't use it is just more ways for things to go wrong -- for example a user connects to it while playing and downloads mail via pop, which deltes it from the server, and then complains they've lost their email. Why waste the server's resources on a process you don't expect to use. Robert Moir MSMVP IT Systems Engineer Luton Sixth Form College Ciderspace: An online 3D virtual reality environment for tramps. Ciderspace Cafe: A park Bench. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: 05 February 2003 15:10 To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
How 'bout the fact that you get domain usernames and passwords flying around in plaintext when you use POP3. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Posted At: Wednesday, February 05, 2003 10:10 AM Posted To: Exchange (Swynk) Conversation: POP3 bad? Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
eh... you can get POP3 over SSL though (port 995) albeit that most don't use it. But another good argument is that people inadvertently pop their mail out of their inbox.. then you have to go through the hassle of 'recover deleted items' on the inbox (or try to explain it to them). -Original Message- From: Exchange (Swynk) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:30 AM To: Exchange Discussions Subject: RE: POP3 bad? How 'bout the fact that you get domain usernames and passwords flying around in plaintext when you use POP3. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Posted At: Wednesday, February 05, 2003 10:10 AM Posted To: Exchange (Swynk) Conversation: POP3 bad? Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
They can do that just as well without POP. In fact, I would wager that many of your users are doing that today without POP3. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 8:25 AM To: Exchange Discussions Subject: RE: POP3 bad? At our site it's our policy that we purge all email 30 days and older. We don't want people downloading mail to their home computers at the risk of breaking that policy. That may not be applicable to your site, but that is one reason. Aaron -Original Message- From: Robert Moir [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 7:56 AM To: Exchange Discussions Subject: RE: POP3 bad? Well its always a bad idea in general security terms to run processes when you have no need to use them; why open yourself up to the potential of an exploit in something you don't have to use when you can just close it down and forget the risk? Why risk forgetting you need to apply a patch for it because We don't use that here so we don't need to worry about it (case in point would be those MSDE 2000 installs that got hit by slammer whose users didn't worry because they didn't use SQL Server 2000). Having it running when you don't use it is just more ways for things to go wrong -- for example a user connects to it while playing and downloads mail via pop, which deltes it from the server, and then complains they've lost their email. Why waste the server's resources on a process you don't expect to use. Robert Moir MSMVP IT Systems Engineer Luton Sixth Form College Ciderspace: An online 3D virtual reality environment for tramps. Ciderspace Cafe: A park Bench. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: 05 February 2003 15:10 To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
as in pst? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ed Crowley Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: RE: POP3 bad? They can do that just as well without POP. In fact, I would wager that many of your users are doing that today without POP3. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 8:25 AM To: Exchange Discussions Subject: RE: POP3 bad? At our site it's our policy that we purge all email 30 days and older. We don't want people downloading mail to their home computers at the risk of breaking that policy. That may not be applicable to your site, but that is one reason. Aaron -Original Message- From: Robert Moir [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 7:56 AM To: Exchange Discussions Subject: RE: POP3 bad? Well its always a bad idea in general security terms to run processes when you have no need to use them; why open yourself up to the potential of an exploit in something you don't have to use when you can just close it down and forget the risk? Why risk forgetting you need to apply a patch for it because We don't use that here so we don't need to worry about it (case in point would be those MSDE 2000 installs that got hit by slammer whose users didn't worry because they didn't use SQL Server 2000). Having it running when you don't use it is just more ways for things to go wrong -- for example a user connects to it while playing and downloads mail via pop, which deltes it from the server, and then complains they've lost their email. Why waste the server's resources on a process you don't expect to use. Robert Moir MSMVP IT Systems Engineer Luton Sixth Form College Ciderspace: An online 3D virtual reality environment for tramps. Ciderspace Cafe: A park Bench. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: 05 February 2003 15:10 To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
I'm sure they can. Anyone can make pst file, copy their emails to disk, or find another way. But it at least blocks that method of doing it. Aaron -Original Message- From: Charles Marriott [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 9:13 AM To: Exchange Discussions Subject: RE: POP3 bad? as in pst? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ed Crowley Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: RE: POP3 bad? They can do that just as well without POP. In fact, I would wager that many of your users are doing that today without POP3. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 8:25 AM To: Exchange Discussions Subject: RE: POP3 bad? At our site it's our policy that we purge all email 30 days and older. We don't want people downloading mail to their home computers at the risk of breaking that policy. That may not be applicable to your site, but that is one reason. Aaron -Original Message- From: Robert Moir [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 7:56 AM To: Exchange Discussions Subject: RE: POP3 bad? Well its always a bad idea in general security terms to run processes when you have no need to use them; why open yourself up to the potential of an exploit in something you don't have to use when you can just close it down and forget the risk? Why risk forgetting you need to apply a patch for it because We don't use that here so we don't need to worry about it (case in point would be those MSDE 2000 installs that got hit by slammer whose users didn't worry because they didn't use SQL Server 2000). Having it running when you don't use it is just more ways for things to go wrong -- for example a user connects to it while playing and downloads mail via pop, which deltes it from the server, and then complains they've lost their email. Why waste the server's resources on a process you don't expect to use. Robert Moir MSMVP IT Systems Engineer Luton Sixth Form College Ciderspace: An online 3D virtual reality environment for tramps. Ciderspace Cafe: A park Bench. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: 05 February 2003 15:10 To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
Yes, and perhaps even accidentally by setting the delivery location in the profile to the PST. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Charles Marriott Sent: Wednesday, February 05, 2003 9:13 AM To: Exchange Discussions Subject: RE: POP3 bad? as in pst? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ed Crowley Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: RE: POP3 bad? They can do that just as well without POP. In fact, I would wager that many of your users are doing that today without POP3. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 8:25 AM To: Exchange Discussions Subject: RE: POP3 bad? At our site it's our policy that we purge all email 30 days and older. We don't want people downloading mail to their home computers at the risk of breaking that policy. That may not be applicable to your site, but that is one reason. Aaron -Original Message- From: Robert Moir [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 7:56 AM To: Exchange Discussions Subject: RE: POP3 bad? Well its always a bad idea in general security terms to run processes when you have no need to use them; why open yourself up to the potential of an exploit in something you don't have to use when you can just close it down and forget the risk? Why risk forgetting you need to apply a patch for it because We don't use that here so we don't need to worry about it (case in point would be those MSDE 2000 installs that got hit by slammer whose users didn't worry because they didn't use SQL Server 2000). Having it running when you don't use it is just more ways for things to go wrong -- for example a user connects to it while playing and downloads mail via pop, which deltes it from the server, and then complains they've lost their email. Why waste the server's resources on a process you don't expect to use. Robert Moir MSMVP IT Systems Engineer Luton Sixth Form College Ciderspace: An online 3D virtual reality environment for tramps. Ciderspace Cafe: A park Bench. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: 05 February 2003 15:10 To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
Whoopee. You've blocked a method nobody would have used. Go on home now and feel proud of your accomplishment. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 9:33 AM To: Exchange Discussions Subject: RE: POP3 bad? I'm sure they can. Anyone can make pst file, copy their emails to disk, or find another way. But it at least blocks that method of doing it. Aaron -Original Message- From: Charles Marriott [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 9:13 AM To: Exchange Discussions Subject: RE: POP3 bad? as in pst? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ed Crowley Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: RE: POP3 bad? They can do that just as well without POP. In fact, I would wager that many of your users are doing that today without POP3. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 8:25 AM To: Exchange Discussions Subject: RE: POP3 bad? At our site it's our policy that we purge all email 30 days and older. We don't want people downloading mail to their home computers at the risk of breaking that policy. That may not be applicable to your site, but that is one reason. Aaron -Original Message- From: Robert Moir [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 7:56 AM To: Exchange Discussions Subject: RE: POP3 bad? Well its always a bad idea in general security terms to run processes when you have no need to use them; why open yourself up to the potential of an exploit in something you don't have to use when you can just close it down and forget the risk? Why risk forgetting you need to apply a patch for it because We don't use that here so we don't need to worry about it (case in point would be those MSDE 2000 installs that got hit by slammer whose users didn't worry because they didn't use SQL Server 2000). Having it running when you don't use it is just more ways for things to go wrong -- for example a user connects to it while playing and downloads mail via pop, which deltes it from the server, and then complains they've lost their email. Why waste the server's resources on a process you don't expect to use. Robert Moir MSMVP IT Systems Engineer Luton Sixth Form College Ciderspace: An online 3D virtual reality environment for tramps. Ciderspace Cafe: A park Bench. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: 05 February 2003 15:10 To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe
RE: POP3 bad?
Guess that depends how many computer literate people you have at your site now doesn't it? -Original Message- From: Ed Crowley [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:14 AM To: Exchange Discussions Subject: RE: POP3 bad? Whoopee. You've blocked a method nobody would have used. Go on home now and feel proud of your accomplishment. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 9:33 AM To: Exchange Discussions Subject: RE: POP3 bad? I'm sure they can. Anyone can make pst file, copy their emails to disk, or find another way. But it at least blocks that method of doing it. Aaron -Original Message- From: Charles Marriott [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 9:13 AM To: Exchange Discussions Subject: RE: POP3 bad? as in pst? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ed Crowley Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: RE: POP3 bad? They can do that just as well without POP. In fact, I would wager that many of your users are doing that today without POP3. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 8:25 AM To: Exchange Discussions Subject: RE: POP3 bad? At our site it's our policy that we purge all email 30 days and older. We don't want people downloading mail to their home computers at the risk of breaking that policy. That may not be applicable to your site, but that is one reason. Aaron -Original Message- From: Robert Moir [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 7:56 AM To: Exchange Discussions Subject: RE: POP3 bad? Well its always a bad idea in general security terms to run processes when you have no need to use them; why open yourself up to the potential of an exploit in something you don't have to use when you can just close it down and forget the risk? Why risk forgetting you need to apply a patch for it because We don't use that here so we don't need to worry about it (case in point would be those MSDE 2000 installs that got hit by slammer whose users didn't worry because they didn't use SQL Server 2000). Having it running when you don't use it is just more ways for things to go wrong -- for example a user connects to it while playing and downloads mail via pop, which deltes it from the server, and then complains they've lost their email. Why waste the server's resources on a process you don't expect to use. Robert Moir MSMVP IT Systems Engineer Luton Sixth Form College Ciderspace: An online 3D virtual reality environment for tramps. Ciderspace Cafe: A park Bench. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: 05 February 2003 15:10 To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange
RE: POP3 bad?
Not at all, which is my point. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 11:22 AM To: Exchange Discussions Subject: RE: POP3 bad? Guess that depends how many computer literate people you have at your site now doesn't it? -Original Message- From: Ed Crowley [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:14 AM To: Exchange Discussions Subject: RE: POP3 bad? Whoopee. You've blocked a method nobody would have used. Go on home now and feel proud of your accomplishment. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 9:33 AM To: Exchange Discussions Subject: RE: POP3 bad? I'm sure they can. Anyone can make pst file, copy their emails to disk, or find another way. But it at least blocks that method of doing it. Aaron -Original Message- From: Charles Marriott [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 9:13 AM To: Exchange Discussions Subject: RE: POP3 bad? as in pst? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ed Crowley Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: RE: POP3 bad? They can do that just as well without POP. In fact, I would wager that many of your users are doing that today without POP3. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 8:25 AM To: Exchange Discussions Subject: RE: POP3 bad? At our site it's our policy that we purge all email 30 days and older. We don't want people downloading mail to their home computers at the risk of breaking that policy. That may not be applicable to your site, but that is one reason. Aaron -Original Message- From: Robert Moir [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 7:56 AM To: Exchange Discussions Subject: RE: POP3 bad? Well its always a bad idea in general security terms to run processes when you have no need to use them; why open yourself up to the potential of an exploit in something you don't have to use when you can just close it down and forget the risk? Why risk forgetting you need to apply a patch for it because We don't use that here so we don't need to worry about it (case in point would be those MSDE 2000 installs that got hit by slammer whose users didn't worry because they didn't use SQL Server 2000). Having it running when you don't use it is just more ways for things to go wrong -- for example a user connects to it while playing and downloads mail via pop, which deltes it from the server, and then complains they've lost their email. Why waste the server's resources on a process you don't expect to use. Robert Moir MSMVP IT Systems Engineer Luton Sixth Form College Ciderspace: An online 3D virtual reality environment for tramps. Ciderspace Cafe: A park Bench. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: 05 February 2003 15:10 To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp
RE: POP3 bad?
The one on the top of your head? :) Just kidding. I see your point. -Original Message- From: Ed Crowley [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 11:25 AM To: Exchange Discussions Subject: RE: POP3 bad? Not at all, which is my point. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 11:22 AM To: Exchange Discussions Subject: RE: POP3 bad? Guess that depends how many computer literate people you have at your site now doesn't it? -Original Message- From: Ed Crowley [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:14 AM To: Exchange Discussions Subject: RE: POP3 bad? Whoopee. You've blocked a method nobody would have used. Go on home now and feel proud of your accomplishment. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 9:33 AM To: Exchange Discussions Subject: RE: POP3 bad? I'm sure they can. Anyone can make pst file, copy their emails to disk, or find another way. But it at least blocks that method of doing it. Aaron -Original Message- From: Charles Marriott [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 9:13 AM To: Exchange Discussions Subject: RE: POP3 bad? as in pst? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Ed Crowley Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: RE: POP3 bad? They can do that just as well without POP. In fact, I would wager that many of your users are doing that today without POP3. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Edwards, Aaron Sent: Wednesday, February 05, 2003 8:25 AM To: Exchange Discussions Subject: RE: POP3 bad? At our site it's our policy that we purge all email 30 days and older. We don't want people downloading mail to their home computers at the risk of breaking that policy. That may not be applicable to your site, but that is one reason. Aaron -Original Message- From: Robert Moir [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 7:56 AM To: Exchange Discussions Subject: RE: POP3 bad? Well its always a bad idea in general security terms to run processes when you have no need to use them; why open yourself up to the potential of an exploit in something you don't have to use when you can just close it down and forget the risk? Why risk forgetting you need to apply a patch for it because We don't use that here so we don't need to worry about it (case in point would be those MSDE 2000 installs that got hit by slammer whose users didn't worry because they didn't use SQL Server 2000). Having it running when you don't use it is just more ways for things to go wrong -- for example a user connects to it while playing and downloads mail via pop, which deltes it from the server, and then complains they've lost their email. Why waste the server's resources on a process you don't expect to use. Robert Moir MSMVP IT Systems Engineer Luton Sixth Form College Ciderspace: An online 3D virtual reality environment for tramps. Ciderspace Cafe: A park Bench. -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: 05 February 2003 15:10 To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List
RE: POP3 bad?
If he already wants to shut it off why does he need any reasons? -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
Is it not a best practice to 'shut off' any network entry/access point that you aren't explicitly using? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Andrey Fyodorov Sent: Wednesday, February 05, 2003 12:10 PM To: Exchange Discussions If he already wants to shut it off why does he need any reasons? -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
Justification to management? -Original Message- From: Andrey Fyodorov [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 3:10 PM To: Exchange Discussions Subject: RE: POP3 bad? If he already wants to shut it off why does he need any reasons? -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
Question? When a user from out side your firewall connects to exchange via POP3 and logs in. Is that username and password sent in clear text? Is there any security involved in this process? If not someone sniffing in the middle just got a username and password for your domain. I am a newbie to Exchange and security -Original Message- From: Bingel, Chris [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 3:12 PM To: Exchange Discussions Subject: RE: POP3 bad? Justification to management? -Original Message- From: Andrey Fyodorov [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 3:10 PM To: Exchange Discussions Subject: RE: POP3 bad? If he already wants to shut it off why does he need any reasons? -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
You are correct, the username and password is plain text, if that's the authentication method used. Use SSL POP3 (Port 995) to make it secure. k -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Plahtinsky Sent: 05 February 2003 21:18 To: Exchange Discussions Subject: RE: POP3 bad? Question? When a user from out side your firewall connects to exchange via POP3 and logs in. Is that username and password sent in clear text? Is there any security involved in this process? If not someone sniffing in the middle just got a username and password for your domain. I am a newbie to Exchange and security -Original Message- From: Bingel, Chris [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 3:12 PM To: Exchange Discussions Subject: RE: POP3 bad? Justification to management? -Original Message- From: Andrey Fyodorov [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 3:10 PM To: Exchange Discussions Subject: RE: POP3 bad? If he already wants to shut it off why does he need any reasons? -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
http://www.winnetmag.com/Articles/Index.cfm?ArticleID=3847pg=4 k -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of knighTslayer Sent: 05 February 2003 21:32 To: Exchange Discussions Subject: RE: POP3 bad? You are correct, the username and password is plain text, if that's the authentication method used. Use SSL POP3 (Port 995) to make it secure. k -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Plahtinsky Sent: 05 February 2003 21:18 To: Exchange Discussions Subject: RE: POP3 bad? Question? When a user from out side your firewall connects to exchange via POP3 and logs in. Is that username and password sent in clear text? Is there any security involved in this process? If not someone sniffing in the middle just got a username and password for your domain. I am a newbie to Exchange and security -Original Message- From: Bingel, Chris [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 3:12 PM To: Exchange Discussions Subject: RE: POP3 bad? Justification to management? -Original Message- From: Andrey Fyodorov [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 3:10 PM To: Exchange Discussions Subject: RE: POP3 bad? If he already wants to shut it off why does he need any reasons? -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: POP3 bad?
Yes, but regardless of how you have Exchange set up you wouldn't allow that protocol through your firewall unless you had some business reason. Ed Crowley MCSE+Internet MVP kcCC+I Tech Consultant hp Services Protecting the world from PSTs and Bricked Backups! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Plahtinsky Sent: Wednesday, February 05, 2003 1:18 PM To: Exchange Discussions Subject: RE: POP3 bad? Question? When a user from out side your firewall connects to exchange via POP3 and logs in. Is that username and password sent in clear text? Is there any security involved in this process? If not someone sniffing in the middle just got a username and password for your domain. I am a newbie to Exchange and security -Original Message- From: Bingel, Chris [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 3:12 PM To: Exchange Discussions Subject: RE: POP3 bad? Justification to management? -Original Message- From: Andrey Fyodorov [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 3:10 PM To: Exchange Discussions Subject: RE: POP3 bad? If he already wants to shut it off why does he need any reasons? -Original Message- From: Tony Hlabse [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 10:10 AM To: Exchange Discussions Subject: POP3 bad? Are they any reasons to disable POP3 for use by users on a E2K setup? Security or any other? Customer would like to shut it off but needs reasons why POP3 should be shutdown. _ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
