Default SMTP Virtual Server - Best authentication methods?



In setting up Intelligent Message Filter for Exchange 2003 SP2 I
followed the guidelines in "Microsoft Exchange Server Intelligent
Message Filter v2 Operations Guide".

On pages 10 and 11 Microsoft discusses "Helping to Secure Your Gateway
SMTP Virtual Servers." To this end it's suggested that for the inbound
Exchange Server, which in my case is the default virtual server, one
accept only Anonymous Access, unstriking Basic Authentication and
Integrated Windows Authentication. I'm told by the documentation that
this prevents one source of password discovery. In the default
installation on my server all three of those methods were ticked.

I feel like checking that out here. I see many more SMTP connection
errors in the Application Log, but I'm not sure that's related. I've
gone from 0-6 SMTP connection errors a day to about 20. These errors
have always been have been and continue to be MSExchange Transport
EventIDs 7004 and 7010. They appear to be legitimately REJECTED
connections. I am in no way unhappy or concerned by those errors.

* What I'm wondering is if illegitimate connections were being made
before, or is what is now 0-20 connection drops still in the range of
"normal"?

* Are those authentication settings correct?

--
Mike H
.



Relevant Pages

  • Re: WAN clients - Exchange unavailable, then connects later
    ... Ok, have done as you said to see the different connection settings, and the ... version for the mail server is 7226. ... the Exchange server by both name and IP. ... You can access the Outlook data from the desktop by holding CTRL + ...
    (microsoft.public.exchange.connectivity)
  • Re: Exchange 2003 design for 2 sites
    ... One branch office with 5 users. ... Currently we have one Exchange 2003 server located at our main office. ... Controller and Exchange server) at the branch office on which we will have ... When the Internet connection at our main office ...
    (microsoft.public.exchange.design)
  • Re: POP3 stopped working
    ... I enabled connection logging for the POP3SVC and found out that the issue ... Microsoft Exchange Server 2003 w/SP2 ... Suddenly the POP3 has stopped working on this Exchange server. ...
    (microsoft.public.exchange.connectivity)
  • Re: Configuring PPC Win Mob 5 (Treo 700wx)
    ... I sync my 8525 wirelessly with Exchange Server using MediaNet. ... computer's connection? ...
    (microsoft.public.pocketpc)
  • Re: OWA is meaningles outside the office.
    ... Who ever handles your dnsrecords for your domain name can set up what are called MX records which will point mail directly to your server as the primary and somewhere else as a secondary. ... And if you have the static IP you can have all mail bound for mydomain.com go straight to the exchange server in real time instead of out to your webhost and then have to be collected every 15 minutes. ... It works if I get access via my office VPN connection from home. ... Also this has become important because I have discovered that Exchange Server Web access is not working properly in the following way. ...
    (microsoft.public.backoffice.smallbiz2000)