ry 07, 2002 5:28 PM
To: Exchange Discussions
Subject: RE: OWA Enumeration Question
Do not underestimate the power of a dictionary attack. Especially if the
alias of the DL is less than 8 characters long, it is not hard to manage a
brute-force attack.
-Original Message-
From: Blunt, James H
: Exchange Discussions
Subject: RE: OWA Enumeration Question
Chris,
1. Not an obvious name.
2. It did include an external SMTP addr <\duh> However, the DL
was hidden from the GAL, as was the membership of the DL. 3. Dictionary
generated listing wouldn't have worked for reason #1.
I removed it about 1/2 an hour ago. What every other addy in the org? :o(
-Original Message-
From: Chris Scharff [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 07, 2002 3:39 PM
To: Exchange Discussions
Subject: RE: OWA Enumeration Question
Change the SMTP address of the DL
/exchange.htm
hat's exactly the situation...it's never been used to send ANY mail. Any
ideas on what I should do at this point?
-Original Message-
From: Chris Scharff [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 07, 2002 3:16 PM
To: Exchange Discussions
Subject: RE: OWA Enumeratio
That's exactly the situation...it's never been used to send ANY mail. Any
ideas on what I should do at this point?
-Original Message-
From: Chris Scharff [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 07, 2002 3:16 PM
To: Exchange Discussions
Subject: RE: OWA Enumeratio
age-
> From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 07, 2002 5:12 PM
> To: Exchange Discussions
> Subject: RE: OWA Enumeration Question
>
>
> Chris,
>
> 1. Not an obvious name.
> 2. It did include an external SMTP addr <\duh>
TIA O Great Exchang Yoda ;o)
-Original Message-
From: Chris Scharff [mailto:[EMAIL PROTECTED]]
Sent: Monday, January 07, 2002 2:24 PM
To: Exchange Discussions
Subject: RE: OWA Enumeration Question
Other possibilities.
The DL name is an obvious one that someone would guess (e.g. all
/resource/exchange.htm
Chris
--
Chris Scharff
Senior Sales Engineer
MessageOne
If you can't measure, you can't manage!
> -Original Message-
> From: Blunt, James H (Jim) [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 07, 2002 4:22 PM
> To: Exchange Discussions
>
Ok, here's the situation: Win2k SP2 with Exchange OWA 5.5 SP4+2 and IIS 5.0
In the past couple of weeks, we have been getting hit VERY hard by SPAM. It
didn't really trip my trigger until I saw one particular NDR in my
postmaster mailbox this morning. Upon opening and looking specifically at
t
9 matches
Mail list logo
