I think where the confusion lies in relationship to Exchange is name
resolution at the Server level.
If the Internet Mail Service is installed and DNS resolution is enabled
Exchange Server WILL require a DNS Server.
If the client is running over TCP/IP then it also will require some sort of
name resolution whether DNS, or Hosts files.
A unique factor about a MS client is it will also resolve via the LMHOST
file. AND if you are using MS DNS you can have DNS resolve via WINS.
There are no special provisions for SMTP with Exchange Server, it implements
standard SMTP Server functionality as such all/most of the options available
to SMTP servers can be implemented including Forwarding, Smart Hosting and
domain aliasing.
---------------------------------------
Wesley H. Peace
mailto: [EMAIL PROTECTED]
Success is not measured by the position one has reached in life, rather by
the obstacles overcome while trying to succeed. -Booker T. Washington
-----Original Message-----
From: Tim Doscher [mailto:[EMAIL PROTECTED]]
Sent: Saturday, June 19, 1999 10:36 AM
To: 'John Stewart'; 'Adam Shostack'
Cc: 'John Wiltshire'; 'spiff'; 'Firewalls (E-mail)'
Subject: RE: Why not NT?
Exchange will absolutely run without WINS. Exchange does use RPC calls for
client conectivity, but you can also use industry standards like pop, smtp,
imap, and http (OWA). You have several choices for connectors from site
(RPC for lans/high bandwidth), X.400 alot less traffic but more processing
required, cc:mail, groupwise, notes, smtp, etc... Exchange works very well
as messaging/collaboration platform. Typically in larger organizations, you
dedicate a box for smtp traffic (bridgehead). Microsoft has made plenty of
provisions to use any os that supports smtp to do this (unix, linux, bsd,
nt, os2, vax, ....). Microsoft has never attempted to make exchange an isp
product. Why try when send mail works so nicely. Exchange is designed for
an application, and it works great when configured correctly in the proper
environment.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of John Stewart
Sent: Thursday, June 17, 1999 11:52 AM
To: Adam Shostack
Cc: John Wiltshire; 'spiff'; Firewalls (E-mail)
Subject: Re: Why not NT?
One of the mainstays of an NT network is MS Exchange. Last
time I checked our config, Exchange won't run without WINS.
Adam Shostack wrote:
>
> This is true, and mostly irrelevant, because there are almost no
> networks without Win9x on them, and NT can't be configured to use only
> NTLM hashes without stopping access from Win9x. This is because MS
> declines to release a patch to those OSs to use a reasonable
> authentication method.
>
> Adam
>
> On Thu, Jun 10, 1999 at 03:29:53PM +1000, John Wiltshire wrote:
> | >
http://www.microsoft.com/security/downloads/ITSEC_NT4.0_Installation.EXE
> | > "What the user does not see are internal workings, such as the
> | > system-level encryption of their password so that it is never
> | > passed over
> | > the wire in clear text."
> | >
> | > What they would see is the LanMan hash, the entire Keyspace
> | > of which can
> | > be brute forced on an UltraSparc in a few hours with l0pht Crack. (see
> | > http://www.l0pht.com )
> |
> | FUD. NT can easily be configured to never send the LanMan hash. In
fact,
> | in the configuration we are talking about, you disable the "Server" and
> | "Workstation" services anyway so no one can get an SMB connection or any
> | hash at all from the machine.
>
> --
> "It is seldom that liberty of any kind is lost all at once."
> -Hume
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
--
John Stewart
SUPSHIP San Diego
Information Systems Security Mgr
--------------------------------
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
