2K Advance Server with Exchange 2000.

[BZeto]

Pure classroom environment. Im running Win 2K Advance Server with Exchange 2000. My own forest, no one else on the domain. Getting messages and stuff like that come up from other people. Ive disabled the messaging service, stopped the default Web and FTP sites in IIS. What else can I do to block internal (on same subnet) remote access to my server while still maintaining a function mail server?

 

[Unforgiven]

you've disabled the messenger service and are still getting internal popup messages?!?

 

[BZeto]

yes, I think it was through an application though. Basically im just looking for things to double check in order to lock down this box.

 

[djdrastic]

Patch the box the the hilt
Make Sure that You do not have an anonymous relay going there !!!!!!
Get a half decent software firewall
netstat -an
nmap

 

[spyordie007]

Make Sure that You do not have an anonymous relay going there !!!!!!
Get a half decent software firewall

:thumbsup:

What else can I do to block internal (on same subnet) remote access to my server while still maintaining a function mail server?

IPSec

Either that or segment it off from the rest of the network.

 

[BZeto]

Originally posted by: djdrastic
Patch the box the the hilt
Make Sure that You do not have an anonymous relay going there !!!!!!
Get a half decent software firewall
netstat -an
nmap

How would I check for an anonymous relay?

Also will Zone Alarm be ok on the server? I tried to install but it brought up a warning saying that they do not support the software on server systems... It still gave me a choice to install though.

 

[spyordie007]

How would I check for an anonymous relay?

There are a lot of tools (software and websites) that will check it from the outside and verify that it's not acting as an open relay:
http://www.google.com/search?h...amp;btnG=Google+Search