3 ms·
You can publicly expose an SMTP relay while keeping Exchange itself private, right?
by closeparen 6y ago
You can publicly expose an SMTP relay while keeping Exchange itself private, right?
- EvanAnderson 6y agoAbsolutely. The parts of Exchange that got exploited are exposed because people want ActiveSync on their phones and web-based email. If you did without on those, or ran them over a VPN, just having SMTP exposed didn't make you vulnerable to this. Hardly anybody does that, though.
- Spooky23 6y agoYes totally. Most of the people running exchange now with this issue are cheapskates or attorneys. If defense contractors keeping exchange on prem for security/compliance reasons are offering OWA on the internet, obviously there’s a deeper problem.
- xbar 6y agoMy Exchange server avoided this mess by living in this state.