RE: SMTP Gateway on ISA

Why isn't your ISA firewall a member of the domain?

What perceived security advantages does this confer viz. the making it a
member of the domain? 


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Mustafa Cicek [mailto:mbcicek@xxxxxxxxx] 
Sent: Wednesday, October 27, 2004 9:09 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SMTP Gateway on ISA

http://www.ISAserver.org

Hi Tom!
Thanks for reply.

There is following information in the document "ISA Server 2004/Exchange
Server Deployment Kit: Creating a Secure SMTP Relay on the ISA Server
2004
Firewall using the SMTP Filter and Message Screener" :

"The SMTP service on the ISA Server 2004 firewall is configured to block
anonymous relay. However, the default setting is to allow users to relay
through the SMTP server if they can authenticate. Users with accounts in
the Internal network Active Directory can use their domain credentials
to
authenticate with the SMTP relay machine because the ISA Server 2004
firewall is a member of the Internal network domain."

But my ISA server is not a member of internal domain. In this case, how
can ISA server know about the existing domain users and mail addresses?
If
ISA cannot know them, SMTP relay cannot work.

Best Regards
Mustafa

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx




Other related posts: