Re: Anonymous access allowed internally.

Tyson,

So what they are wanting you to do is to remove the Anonymous and the Basic
Authentication from the SMTP virtual servers that are not Bridgeheads (don't
send or receive email outside your Organization).

As far as number 2 the only thing I can think of that they might be
referring to for Hygiene; would be making sure that mail that is allowed to
be sent through the Virtual servers that allow anonymous Auth (Bridgeheads),
the mail still gets scanned for viruses, message size limitations applied,
relay restrictions implemented, send and receive filtering performed as
needed.

Hope this helps.

Kalvin

"Tyson" wrote:

I am not exaclty sure what they meant. This is how the rep from Microsoft
worded it. Do the others make sense to you.

Referring to anonymous mail submission: On all back-end servers should I go
to the proerties of the SMTP Virtual Server => click the access tab => click
the authentication button => and uncheck anonymous acess and basic
authentication


"Nuevo" wrote:

Can you clarify what you mean by anonymous mail submission.

Nue
"Tyson" <Tyson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DF1AF665-EAFD-4F17-AE36-C6879DE789BB@xxxxxxxxxxxxxxxx
I am running Exchange Server 2003 SP1 with two front-end and 3 clusters and
1
Stand-alone server. I have been tasked with the following items and just
want to make sure that I am understanding them.

. Proactively disable both Anonymous and Basic authentication for SMTP
virtual servers across the internal messaging environment



. Designate specific SMTP gateways for anonymous mail submission. Ensure
that mail submitted through such gateways undergoes the appropriate
messaging
hygiene controls in a complete manner



. Restrict authenticated relay permissions to those clients explicitly
defined by IP
address or subnet

It is the first two items that I really need clarification on.

For the first item do I go to the properties of each default virtual
server
in ESM and go to properties and on the access tab/page click
authentication
and clear the check boxes on anonymous access and basic authentication?

On the second item why would I need a designated server for anonymous mail
submission. More clarifiation is also needed on this.

The third is pretty clear.

Thank you,
Tyson




.