RE: Re: Demon Email

["Rob Mouser" <rmouser@xxxxxxx>]

Hi Graham

Yes I know it should go to 2000, but I think the upgrade at this
momment
in time would cause workload meltdown so I am going to have to go for
the sticking plaster option and delay that upgrade a little longer.

Dial-up over ISDN is currently via a USR ISDN external modem. I think I
might have to bight the bullet and buy a 3com type all-in-one box with
router, firewall etc. It's the firms budget anyway!


Many Thanks 
Rob 
Rob Mouser 
rmouser@xxxxxxx 
rob@xxxxxxx 

-----Original Message-----
From: graham_howe [mailto:graham@xxxxxxx]
Sent: 13 June 2002 14:03
To: ukha_d@xxxxxxx
Subject: [ukha_d] Re: Demon Email


--- In ukha_d@y..., "Rob Mouser" <rmouser@t...> wrote:
> Hi 
> 
> This is a little 'wide' but I feel it is relevant to us HA people.
We
> have a Demon Web account here and was infact on the verge of 
setting one
> up for home (Fixed IP etc, ISDN, fixed cost etc.....However don't 
post
> on this as its not the subject!) HOWEVER we have just had external
email
> banned by Demons Abuse Team due to our MS Exchange Server v5.0 
(Part of
> SBS Ver4.0)beeing venerable to email spammers using relay. I've 
spoken
> to Demon and done some research and it appears that Exchange
Ver5.0
> cannot be protected against relay attacks! Only Ver5.5 has 
sufficient
> functionality to block relay use.
> 
> OK so we cannot upgrade to 5.5 (Various issues with compatibility 
with
> some bespoke software supplied by another company.) (Or in effect 
SBS
> v4.5) at this precise moment and so the only option is to add a 
firewall
> to the network (25 users) anyone got any recommendations that will
do
> the trick? As long as Demon can telnet in and get refused they will
open
> us back up.
> 
> Yours bemused and confused.........
> 
> Many Thanks
> Rob

This is very interesting as I have just had the exact same thing 
(though ADSL based) happen to a client of mine (I did their web site 
not their SBS install). Their solution was to move to another ISP, 
but I suspect that is only temporary as I'm sure that other ISPs will 
soon start to ban Exchange 5 too.

Anyway, in terms of a solution, are you using a router between your 
server and the net, if so then it should be possible to go in to the 
router set up and block the ports, or better still, if there is no 
need for any connection in to the network simply block all incoming 
traffic.

If you do not have a router then a hardware or software firewall will 
be required and that really depends upon your budget. I have no 
experience of this myself, but I know there are several on this list 
who can suggest a linux solution that has the advantage of being free 
if you have a spare machine to put it on.

Of course you really should upgrade to SBS2000, but then you knew 
that didn't you ;-)

Graham


For more information: http://www.automatedhome.co.uk
<http://www.automatedhome.co.uk> 
Post message: ukha_d@xxxxxxx 
Subscribe:  ukha_d-subscribe@xxxxxxx 
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
List owner:  ukha_d-owner@xxxxxxx 

Your use of Yahoo! Groups is subject to the Yahoo! Terms of
<http://docs.yahoo.com/info/terms/>
Service. 




For more information: http://www.automatedhome.co.uk
Post message: ukha_d@xxxxxxx 
Subscribe:  ukha_d-subscribe@xxxxxxx 
Unsubscribe:  ukha_d-unsubscribe@xxxxxxx 
List owner:  ukha_d-owner@xxxxxxx

Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.