Watch out for SMTP relaying if this is the IIS SMTP service or the Win2k
SMTP vulnerability (if your OS is Win2k of course..)
 
Check out.

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
bulletin/MS01-037.asp

To eliminate the relaying risk for IIS SMTP you will need to review the
"Relaying" security settings in properties of the SMTP Virtual server in the
IIS admin console.

Good luck

JK

-----Original Message-----
From: Matthew.Timcantire.com [mailto:Matthew.Timcantire.com]
Sent: Thursday, July 26, 2001 7:10 AM
To: focus-mssecurityfocus.com
Subject: Microsoft SMTP Service

Hello all,

Has anyone used the MS SMTP service on an IIS web server? Are there any
security risks associated with this if the server is sitting in a DMZ and
will be using this to send mail out to an external mail domain? Any help
here would be appreciated.

MT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]