Even as recently as five years ago, many computer industry experts would never have guessed how pervasive and “business critical” electronic messaging would eventually become. The degree to which some information technology professionals are surprised by the pervasive nature of today’s electronic mails systems is merely amusing to those of us that have had an e-mail address for more than 20 years. I have been using electronic mail of one type or another since 1980 and have specialized in messaging systems since 1988, so it comes as no surprise to me the current dependency that businesses and government entities have on. | Securing Exchange Server and Outlook Web Access By Jim McBee Excerpted from the forthcoming book Special Ops by Erik Pace Birkholz Foundstone Copyright 2003 by Syngress Publishing all rights reserved INTRODUCING EXCHANGE Windows 2000 Exchange 2000 UNDERSTANDING THE BASIC SECURITY RISKS ASSOCIATED WITH EXCHANGE 2000 7 Guess My Account and UPN Name .8 Exchange 2000 Windows 2000 and Active Exchange 2000 Administrative Mailbox Denial of Service and Boundless E-Mail The E-Mail-Based Types of File Information Store File Message Tracking Vulnerability of Transmitted Message Event Service and Event Message Relay via PREVENTING EXCHANGE SECURITY The W2K IIS Platform Must Be Dedicate Servers to Specific Disable Unnecessary Unnecessary Exchange 2000 Back-End Server Unnecessary Exchange 2000 Front-End Server Tightening Mailbox Enabling SSL for Internet or Remote 1 Securing Exchange Server 2000 and Outlook Web Access Enabling SSL for POP3 IMAP4 or NNTP Enabling SSL for Outlook Web Access Locking Down an IIS OWA Imposing Mailbox Size Size and Recipients SMTP Virtual Server PROTECTING CRITICAL Network Analysis Risk Denying Client Restricting Internet Restricting MAPI Client STOPPING Choosing the Correct Anti-Virus SMTP Virus Scanners and Content Virus Scanning at the Blocking File Exchange 2000 and MAPI Clients and Accessing the Exchange 2000 Directory Accessing the Information Where Are My New Mail Notifications .45 POP3 IMAP4 NNTP and HTTP SMTP .
