Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.
Course Of The Month
9 days, 15 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
How do I resecure my Exchange 2003 server
Posted on 2007-11-29
I have an Exchange 2003 SP2 server that was recently hijacked by someone who gained access using the username and password of one of our employees. I believe I have this situation under control.
However, I am looking for some step-by-step directions on how to really lock down our server. I am familiar with navigating ESM but I am unsure of what authentication options should be enabled, and pretty much every other setting in there. Could someone help me set the security on this server so only users of our domain can send mail?
Also, is there a way to flag the admin if one user is sending X number of emails out?
Thanks again!
However, I am looking for some step-by-step directions on how to really lock down our server. I am familiar with navigating ESM but I am unsure of what authentication options should be enabled, and pretty much every other setting in there. Could someone help me set the security on this server so only users of our domain can send mail?
Also, is there a way to flag the admin if one user is sending X number of emails out?
Thanks again!
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
3
-
2
5 Comments
If you are looking at SMTP then doing anything with authentication will not help. It isn't the authentication that is the problem, but the permissions.
If you do not need anyone relaying through the server (so you have no POP3/SMTP clients) then turn off all relaying options and authenticated relaying.
Enable recipient filtering.
Then it comes down to good network security practises - nothing to do with Exchange.
For example
- expiring passwords
- lockout periods
- lockout after a number of retries
etc
Exchange is secure out of the box, you only get problems if someone starts playing around with it.
Finally, the Exchange best practises tool will sometimes spot errors. http://www.exbpa.com/
On the alerts - there is nothing in the full product of Exchange. You would have to use a third party tool.
Simon.
If you do not need anyone relaying through the server (so you have no POP3/SMTP clients) then turn off all relaying options and authenticated relaying.
Enable recipient filtering.
Then it comes down to good network security practises - nothing to do with Exchange.
For example
- expiring passwords
- lockout periods
- lockout after a number of retries
etc
Exchange is secure out of the box, you only get problems if someone starts playing around with it.
Finally, the Exchange best practises tool will sometimes spot errors. http://www.exbpa.com/
On the alerts - there is nothing in the full product of Exchange. You would have to use a third party tool.
Simon.
Thanks for that link, it looks like a slick application.
This maybe a dumb question, but what exactly is relaying?
We do not use pop mail, but I think we are using smtp on some windows mobile devices, but I might be wrong.
Again thanks for all your help.
This maybe a dumb question, but what exactly is relaying?
We do not use pop mail, but I think we are using smtp on some windows mobile devices, but I might be wrong.
Again thanks for all your help.
Relaying is basically anything that is not using MAPI. Outlook configured to connect to Exchange as opposed to POP3/IMAP is using MAPI. Blackberry through BES is MAPI. Windows Mobile devices using Exchange ActiveSync is a form of MAPI. OWA is MAPI.
Outlook Express would require relaying. Sending email by SMTP from another device to an external server would also require relaying. However SMTP from a device to an internal user (so a hardware alert for example) does not require relaying.
If you are doing a pure Outlook 200x deployment then you do not need any relaying settings enabled for the clients to work correctly.
Simon.
Outlook Express would require relaying. Sending email by SMTP from another device to an external server would also require relaying. However SMTP from a device to an internal user (so a hardware alert for example) does not require relaying.
If you are doing a pure Outlook 200x deployment then you do not need any relaying settings enabled for the clients to work correctly.
Simon.
Do you know if Entourage X requires relaying? My entire office is running Outlook 2003-2007 except for two notebooks that are running OS X.
Again, thank you for your time and knowledge.
-Jesse
Again, thank you for your time and knowledge.
-Jesse
My knowledge of Entourage is not great (I can just about spell it) but those clients will probably need some kind of relaying. Authenticated relaying would be the best option as that would allow you to lock it down to specific users and not IP addresses.
http://www.amset.info/exchange/smtp-relaysecure.asp
Simon.
http://www.amset.info/exchange/smtp-relaysecure.asp
Simon.
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
This article will help to fix the below error for MS Exchange server 2010
I. Out Of office not working
II. Certificate error "name on the security certificate is invalid or does not match the name of the site"
III. Make Internal URLs and External…
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center.
Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center.
Navigate to the Organization >> Ad…
In this video we show how to create a mailbox database in Exchange 2013. We show this process by using the Exchange Admin Center.
Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center.
Navigate to the Servers >> Data…
Suggested Courses
Earn Certification
HTML5 Specialist - Certification
Free withPremium
Course of the Month9 days, 15 hours left to enroll
Earn Certification
MTA Networking Fundamentals Exam 98-366
$59.00$53.10
623 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.