Syngress - Securing Exchange Server and Outlook Web Access
基本信息
- 云盘路径:
/田浩然上传的资料/电子书/[安全盛典]Syngress安全丛书/Syngress - Securing Exchange Server and Outlook Web Access.pdf - 文件大小: 1.1M
- 作者/机构: Securing Exchange Server and Outlook Web Access
- 处理方式: pdf-inspector 文本提取
- 消化状态: 已完成
核心内容
Securing Exchange Server and Outlook Web Access
By Jim McBee
Excerpted from the forthcoming book “Special Ops”, by Erik Pace Birkholz, Foundstone
Copyright 2003 by Syngress Publishing, all rights reserved
INTRODUCTION… 3
INTRODUCING EXCHANGE 2000… 4
WINDOWS 2000 DEPENDENCIES… 5 EXCHANGE 2000 COMPONENTS… 6
UNDERSTANDING THE BASIC SECURITY RISKS ASSOCIATED WITH EXCHANGE 2000 7
GUESS MY ACCOUNT AND UPN NAME!… 8 EXCHANGE 2000, WINDOWS 2000, AND ACTIVE DIRECTORY… 8 EXCHANGE 2000 ADMINISTRATIVE RIGHTS… 9 MAILBOX RIGHTS… 12 DENIAL OF SERVICE AND EXCHANGE… 13 Boundless E-Mail Storage… 13 The E-Mail-Based Virus… 14 TYPES OF FILE VULNERABILITIES… 14 Information Store File Vulnerabilities… 14 Message Tracking Logs… 15 VULNERABILITY OF TRANSMITTED DATA… 16 MESSAGE AUTHENTICITY… 17 EVENT SERVICE AND EVENT SINKS… 18 MESSAGE RELAY VIA SMTP… 18
PREVENTING EXCHANGE SECURITY PROBLEMS… 20
THE W2K/IIS PLATFORM MUST BE SOLID… 21 DEDICATE SERVERS TO SPECIFIC FUNCTIONS… 22 DISABLE UNNECESSARY SERVICES… 22 Unnecessary Exchange 2000 Back-End Server Services… 22 Unnecessary Exchange 2000 Front-End Server Services… 23 TIGHTENING MAILBOX SECURITY… 24 ENABLING SSL FOR INTERNET OR REMOTE CLIENTS… 25
Securing Exchange Server 2000 and Outlook Web Access
Enabling SSL for POP3, IMAP4, or NNTP Clients… 26 Enabling SSL for Outlook Web Access Clients… 28 LOCKING DOWN AN IIS/OWA SERVER… 30 IMPOSING LIMITS… 31 Mailbox Size Limits… 31 Size and Recipients Limits… 32 SMTP Virtual Server Limits… 33 PROTECTING CRITICAL FILES… 34 NETWORK ANALYSIS RISK REDUCTION… 35 DENYING CLIENT ACCESS… 37 Restricting Internet Clients… 37 Restricting MAPI Client Versions… 38 STOPPING VIRUSES… 39 Choosing the Correct Anti-Virus Solution… 39 SMTP Virus Scanners and Content Inspection… 39 Virus Scanning at the Desktop… 40 Blocking File Attachments… 40 EXCHANGE 2000 AND FIREWALLS… 42 MAPI Clients and Firewalls… 43 Accessing the Exchange 2000 Directory Service… 44 Accessing the Information Store… 44 Where Are My New Mail Notifications?… 45 POP3, IMAP4, NNTP, and HTTP Clients… 45 SMTP SECURITY… 46 Restricting SMTP Relay… 46 Just the Bugs, Ma’am… 47 Providing Encrypted Data Streams of SMTP Traffic… 48 Changing the SMTP Banner… 49 Giving Away the Store… 49
AUDITING FOR POSSIBLE SECURITY BREACHES… 50
WINDOWS 2000 EVENT AUDITING… 50 EXCHANGE 2000 EVENT AUDITING… … (内容较长已截断) …