Announcement

Collapse
No announcement yet.

Esmtp Auth

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Esmtp Auth

    Does anyone know how to disable AUTH in ESMTP in exchange 2003. I have had a security consultant tell us it should be done along with ATRN,ETRN and TURN to secure our Internet facing Exchange server. I have looked at the KB article below but cannot find AUTH. Is it something that should even be done? Does anyone have a checklist for securing an Internet facing exchange server?

    http://support.microsoft.com/default...en-us%3B257569

  • #2
    Re: Esmtp Auth

    Only "consultants" come up with these kinds of requests. Usually means they can't find anything else so go looking for something.

    I usually ask for proof of how this will improve the security and they don't bother me again.

    Being an Exchange MVP usually helps as well.

    Do you have any users relaying through your server? Using Outlook Express etc?
    If not, then you can switch off the authentication.

    ATRN shouldn't be on.

    The others I wouldn't worry about. Microsoft don't...



    220 IGT-IMC-01.redmond.corp.microsoft.com Microsoft ESMTP MAIL Service <Inbound
    SMTP Virtual Server> Thu, 15 Jun 2006 13:18:48 -0700
    ehlo
    250-IGT-IMC-01.redmond.corp.microsoft.com Hello [82.152.53.1]
    250-TURN
    250-SIZE 10485760
    250-ETRN
    250-PIPELINING
    250-DSN
    250-ENHANCEDSTATUSCODES
    250-8bitmime
    250-BINARYMIME
    250-CHUNKING
    250-VRFY
    250-TLS
    250-STARTTLS
    250-X-LINK2STATE
    250-XEXCH50
    250 OK


    Simon.
    --
    Simon Butler
    Exchange MVP

    Blog: http://blog.sembee.co.uk/
    More Exchange Content: http://exchange.sembee.info/
    Exchange Resources List: http://exbpa.com/
    In the UK? Hire me: http://www.sembee.co.uk/

    Sembee is a registered trademark, used here with permission.

    Comment

    Working...
    X