Who are you obscuring it from? Script kiddies are scanning for IP addresses, so it doesn't matter what the name is. A directed attack on you is going to do some research and know your domain name. They'll start by scanning 25 and 80 on all your listed MX entries. I don't think you are really able to hide without closing the firewall or changing your ports.
I welcome any dissenting opinions as mine are always in the forging stage. Bill From: David Lum [mailto:david....@nwea.org] Sent: Thursday, July 16, 2009 1:42 PM To: NT System Admin Issues Subject: Security by obscurity? I am having a discussion with some of my fellow SE's, they think having OWA's address be hostname.domain.com/exchange instead of mail.companyname.com for "security by obscurity" reasons. I think it's more overhead/help tickets than it worth. Comments? David Lum // SYSTEMS ENGINEER NORTHWEST EVALUATION ASSOCIATION (Desk) 971.222.1025 // (Cell) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
