[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-ms
Subject:    RE: Does In-Place Upgrade of Microsoft Exchange Create Open
From:       "Deus, Attonbitus" <Thor () HammerofGod ! com>
Date:       2003-04-18 14:26:41
[Download RAW message or body]


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 02:42 PM 4/17/2003, Amarante, Rodrigo P. wrote:
>Some people don't realize that there are also a connector
>configuration that could allow relaying. In the properties for the
>SMTP Connector for the routing group, in the address space tab
>there's a check box that states: "Allow messages to be relayed to
>these domains"
>Since this is a SMTP connector to the "world" (AKA Internet Mail
>Service), the "these domains" that the check box refer to are basic
>everything (*).
>The connector's setting overrides the SMTP Virtual Server
>settings....So if you don't want to relay, make sure the box is not
>checked and that the SMTP Virtual Server is also not allowing
>relaying.

An excellent point- since the default address space is indeed "*"
when an 
SMTP connector is created, admins should ensure that they either
leave 
relaying for the address spaces defined unchecked, or to
modify/delete the 
default * address space and only configure address spaces that they
have 
some reason to allow relaying to.  (Note that the default is not to
allow 
relaying.)

And for those who have not enabled the "display routing groups," (off
by 
default on Ex2k) they only need to look under Connectors (in case
someone 
was looking for a connector under Routing Groups and did not see it
:)

Thanks for adding that point Rodrigo--

T




-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0

iQA/AwUBPqALJYhsmyD15h5gEQJuWQCg44Y2JXnxNjJ+jaAAyj1+31n3JKEAn3bb
3/Yx1JEcFtmmW46KLAJMpQVz
=pTqD
-----END PGP SIGNATURE-----


-----------------------------------------------------------------------------
Attend Black Hat Briefings & Training Europe, May 12-15 in Amsterdam, the 
world's premier event for IT and network security experts.  The two-day 
Training features 6 hand-on courses on May 12-13 taught by professionals.  
The two-day Briefings on May 14-15 features 24 top speakers with no vendor 
sales pitches.  Deadline for the best rates is April 25.  Register today to 
ensure your place. http://www.securityfocus.com/BlackHat-focus-ms
------------------------------------------------------------------------------

[prev in list] [next in list] [prev in thread] [next in thread]