Single, well known port, funneling a single, really, really insecure
protocol (RPC) directly into your network....

Scares me silly.. Not quite as scary as what you can do with ssh, but
darn close.

--------------------------------------------------------------
Roger D. Seielstad - MTS MCSE MS-MVP
Sr. Systems Administrator
Inovis Inc.
 

> -----Original Message-----
> From: Kevinm [CA] [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, May 27, 2004 10:32 AM
> To: Exchange Discussions
> Subject: RE: Exchange 2003 SP1 is out
> 
> Smaller attack surfaces.. you only have the universal fire hole bypass
> port 80 open. And you are requiring mutual authentication on all
> connections. I believe this will be the connection method for 
> all things
> in the future. No more firewalls at the edge, unless you consider the
> edge the air and the Ethernet cable. 
> 
> 
> 
> --Kevinm WLKMMAS Exchange MVP 
> Http://www.wlkmmas.org
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On 
> Behalf Of Roger
> Seielstad
> Sent: Thursday, May 27, 2004 5:04 AM
> To: Exchange Discussions
> Subject: RE: Exchange 2003 SP1 is out
> 
> And provide infinitely larger attack surfaces for hackers and viruses.
> 
> --------------------------------------------------------------
> Roger D. Seielstad - MTS MCSE MS-MVP
> Sr. Systems Administrator
> Inovis Inc.
>  
> 
> > -----Original Message-----
> > From: Jason Clishe [mailto:[EMAIL PROTECTED] 
> > Sent: Wednesday, May 26, 2004 8:01 PM
> > To: Exchange Discussions
> > Cc: Jason Clishe
> > Subject: RE: Exchange 2003 SP1 is out
> > 
> > Don't discount the new RPC over HTTP publisher tool in ESM. 
> This will
> > make RPC over HTTP configurations infinitely simpler.
> > 
> > Jason
> > 
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On 
> > Behalf Of Simon
> > Butler
> > Sent: Wednesday, May 26, 2004 11:44 AM
> > To: Exchange Discussions
> > Subject: RE: Exchange 2003 SP1 is out
> > 
> > The only extra thing I can see in System Manager is an 
> extra column in
> > the server list to tell you if RPC over HTTP is enabled.
> > Otherwise I totally agree with Roger's initial thoughts below. 
> > 
> > Simon.  
> > 
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On 
> > Behalf Of Roger
> > Seielstad
> > Sent: 26 May 2004 14:39
> > To: Exchange Discussions
> > Subject: RE: Exchange 2003 SP1 is out
> > 
> > My initial impressions:
> > 
> > Documentation
> > -Very light on the included fixes
> > -Doesn't mention the OS hotfix requirement anywhere
> > 
> > Install
> > -Inconsistent reboot pattern (2 boxes installed, one required 
> > a reboot,
> > the other didn't) -Doesn't want to install an ESM only 
> > upgrade on an XP
> > SP2RC1 box
> > 
> > Functionality
> > -No noticable issues with normal test loads at this point
> > 
> > 
> > I'm planning on moving it into my pilot deployment in the 
> > next few days
> > to see what happens. 
> > 
> > --------------------------------------------------------------
> > Roger D. Seielstad - MTS MCSE MS-MVP
> > Sr. Systems Administrator
> > Inovis Inc.
> >  
> > 
> > > -----Original Message-----
> > > From: Atkinson, Miles [mailto:[EMAIL PROTECTED]
> > > Sent: Wednesday, May 26, 2004 6:23 AM
> > > To: Exchange Discussions
> > > Subject: RE: Exchange 2003 SP1 is out
> > > 
> > > I found the MS information on included bug fixes and the 
> like was a 
> > > little on the light side.
> > > 
> > > -----Original Message-----
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED] On 
> Behalf Of 
> > > Simon Butler
> > > Sent: 26 May 2004 11:12
> > > To: Exchange Discussions
> > > Subject: RE: Exchange 2003 SP1 is out
> > > 
> > > 
> > > I have now done it twice - once on my office test system 
> > and once on 
> > > the home test system.
> > > The office test system didn't ask for a reboot. The home 
> > system did. 
> > > 
> > > While I appreciate that it is an OS hotfix and not an 
> > application hot 
> > > fix, there wasn't a single mention of the requirement for 
> it, or a 
> > > link to the download in the release notes. I had to lookup the KB 
> > > article from the error, find the download, install it and 
> > then attempt
> > 
> > > the install again.
> > > 
> > > Simon.
> > > 
> > > _________________________________________________________________
> > > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > > Web Interface: 
> > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
> > ext_mode=&lang=english
> > > To unsubscribe send a blank email to
> > > %%email.unsub%%
> > > Exchange List admin:    [EMAIL PROTECTED]
> > > To unsubscribe via postal mail, please contact us at:
> > > Jupitermedia Corp.
> > > Attn: Discussion List Management
> > > 475 Park Avenue South
> > > New York, NY 10016
> > > 
> > > Please include the email address which you have been 
> contacted with.
> > > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface:
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
> ext_mode=&
> > lang=english
> > To unsubscribe send a blank email to
> > %%email.unsub%%
> > Exchange List admin:    [EMAIL PROTECTED]
> > To unsubscribe via postal mail, please contact us at:
> > Jupitermedia Corp.
> > Attn: Discussion List Management
> > 475 Park Avenue South
> > New York, NY 10016
> > 
> > Please include the email address which you have been contacted with.
> > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface:
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
> ext_mode=&
> > lang=english
> > To unsubscribe send a blank email to
> > %%email.unsub%%
> > Exchange List admin:    [EMAIL PROTECTED]
> > To unsubscribe via postal mail, please contact us at:
> > Jupitermedia Corp.
> > Attn: Discussion List Management
> > 475 Park Avenue South
> > New York, NY 10016
> > 
> > Please include the email address which you have been contacted with.
> > 
> > 
> > 
> > 
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Web Interface: 
> > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
> ext_mode=&lang=english
> > To unsubscribe send a blank email to 
> > %%email.unsub%%
> > Exchange List admin:    [EMAIL PROTECTED]
> > To unsubscribe via postal mail, please contact us at:
> > Jupitermedia Corp.
> > Attn: Discussion List Management
> > 475 Park Avenue South
> > New York, NY 10016
> > 
> > Please include the email address which you have been contacted with.
> > 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface:
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
> ext_mode=&
> lang=english
> To unsubscribe send a blank email to
> %%email.unsub%%
> Exchange List admin:    [EMAIL PROTECTED]
> To unsubscribe via postal mail, please contact us at:
> Jupitermedia Corp.
> Attn: Discussion List Management
> 475 Park Avenue South
> New York, NY 10016
> 
> Please include the email address which you have been contacted with.
> 
> 
> 
> 
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Web Interface: 
> http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t
ext_mode=&lang=english
> To unsubscribe send a blank email to 
> %%email.unsub%%
> Exchange List admin:    [EMAIL PROTECTED]
> To unsubscribe via postal mail, please contact us at:
> Jupitermedia Corp.
> Attn: Discussion List Management
> 475 Park Avenue South
> New York, NY 10016
> 
> Please include the email address which you have been contacted with.
> 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Reply via email to