Re: Allowing POP email retrieval

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: MTBoxTech (terry_at_removethis.mtboxcomputers.com)
Date: 01/25/05 

Date: Tue, 25 Jan 2005 16:35:16 -0500

What I was hoping to do is start a good discussion on the ins and outs of
doing this, and whether anybody has any real experience. From a technology
standpoint, I don't mind telling the client it shouldn't be done, as long as
I have a valid argument as to what the exact security risks are. I don’t
believe in avoiding something just because it 'could' cause an issue. Being
connected to the Internet 'could' cause an issue for a business, but you
train users, use firewalls, apply policies, etc. The point is, if it can be
done, and can be secured enough to be worthwhile, it is a viable option. If
anybody has successfully used this in a SBS environment, I would be
interested to hear from them. By the same token, if anybody has valid
information on why it is a bad idea, I would also like to hear that. I see
some of the points you are trying to make Chris, but had a hard time with
the presentation. I really would like to discuss just the technical aspects
of such. POP3 email is widely used in many corporations, especially if they
have employees that are seldom in the office. Perhaps it just isn’t used
often with SBS, I don’t know. My guess is there must be a correct way to
configure and secure it.

Since posting this I’ve been looking for online articles on Microsoft’s
recommendations for or against this, as well as any other noted expert’s
opinions and haven’t found much. There are little things I’ve found on
msexchange.org, but haven’t found what I am looking for yet. Meanwhile, I
still welcome the opinions of others, including yours Chris, on this
subject. You all are experts in various areas, and many ideas are better
than just one.

-TK
M/T Box Computers

"Cris Hanna [SBS-MVP]" <crisnospamhanna@computingnospampossibilities.net>
wrote in message news:Ob8WZ$xAFHA.3840@tk2msftngp13.phx.gbl...
> How many pop3 users have you seen that want a password like A7!bczyu
> (meets strong password requirements)
> And if you allow the user to come up with a "strong password " it will be
> John!Smith1 (would cracked in a hard beat)
> And how are your pop3 users going to handle sending mail.
> Going to setup an extra SMTPconnector
>
> Much cheaper to user OWA
>
> --
> Cris Hanna [SBS - MVP]
> ---------------------------------------
> Please reply only to the newsgroup and not to me directly so that everyone
> can benefit from the information
> "MTBoxTech" <terry@removethis.mtboxcomputers.com> wrote in message
> news:%237WGZHxAFHA.2572@tk2msftngp13.phx.gbl...
>> What about authentication? I haven't tried to set it up yet, but it
>> seems there should be the ability to require authentication.
>>
>> -TK
>> M/T Box Computers
>>
>>
>> "Cris Hanna [SBS-MVP]" <crisnospamhanna@computingnospampossibilities.net>
>> wrote in message news:uxGOp%23wAFHA.2196@TK2MSFTNGP14.phx.gbl...
>>> Turning on the POP3 Server opens your very secure Exchange Server to
>>> become a relay server for spam....don't do it
>>>
>>> Consider OWA
>>>
>>> --
>>> Cris Hanna [SBS - MVP]
>>> ---------------------------------------
>>> Please reply only to the newsgroup and not to me directly so that
>>> everyone can benefit from the information
>>> "MTBoxTech" <terry@removethis.mtboxcomputers.com> wrote in message
>>> news:eeUdJvwAFHA.936@TK2MSFTNGP12.phx.gbl...
>>>> I've got a client that would like some of their people to be able to
>>>> retrieve email from their system via POP. Any opinions/good
>>>> experiences/bad experiences on this?
>>>>
>>>> Thanks,
>>>>
>>>> -TK
>>>> M/T Box Computers
>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

Relevant Pages

  • Re: "Day by Day" by Chris Muir critiqued
    ... gives her opinions of conservative cartoonist ... Chris Muir's comic strip in an assessment titled ... apparent death of an al Quaeda leader at the hands of Sunni insurgets ...
    (rec.arts.comics.strips)
  • Re: OO DB question
    ... Could I just work directly with the DB e.g. form data ... > I guess I'm after opinions on what others would do in these circumstances. ... > instances as interfaces to the DB through their properties? ... Chris ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Entourage 2004 - Delegate - "not connected"...
    ... Try turning off Forms Based Authentication ... >> at the server end, but I have no idea what settings would need to be changed ... >> It also seems for anyone else that is trying to get the delegate feature to ... >> Chris Hart ...
    (microsoft.public.mac.office.entourage)
  • Re: Bring me up to date on SAA, please.
    ... Chris L Peterson: ... were slaves to robber barons. ... reasonable people can have different opinions. ...
    (sci.astro.amateur)
  • Re: Bill Chen Cheats at WSOP and brags about it
    ... Chris in Texas wrote: ... and so they decided to ask their friends for opinions. ... Unlike anyone else in this discussion (AFAIK), ...
    (rec.gambling.poker)