Security Basics mailing list archives

Re: Securing webmail - changing a port necessary to ensure security?


From: Michael Gale <michael () bluesuperman com>
Date: Wed, 11 Feb 2004 19:53:14 -0700


Webmail .... check out squirrelmail ... it is a php webmail client ...
you can secure it a lot more then OWA.

It runs on apache so you can use ssl with server and client certs amount
other things.

Michael.


On Wed, 11 Feb 2004 11:02:34 -0500
"Jennifer Fountain" <jfountain () rbinc com> wrote:

I am going back and forth on this one with a consultant on this one
and need an expert opinion.  So, I turn to you :)  When configuring
webemail(such as owa) that is using https, is it better to change the
default port (443) to an uncommon port (20000)for security reasons? 
Does it secure it further by doing this?  Wouldn't it cause more
issues than anything if you try to access that site from inside an org
that only allows port 80/443 and 21 out?  

Thank you in advance for any opinions you may share.

Kind Regards,

Jennifer Fountain

---------------------------------------------------------------------
------ Free trial: Astaro Security Linux -- firewall with Spam/Virus
Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
---------------------------------------------------------------------
-------



-- 
Hand over the Slackware CD's and back AWAY from the computer, your geek
rights have been revoked !!!

Michael Gale
Slackware user :)
Bluesuperman.com 

---------------------------------------------------------------------------
Free trial: Astaro Security Linux -- firewall with Spam/Virus Protection

Protect your network with the comprehensive security solution that
integrates six applications for ease of use and lower TCO.

Firewall - Virus protection - Spam protection - URL blocking - VPN
- Wireless security.

Download 30-day evaluation at:
http://www.astaro.com/php/contact/securityfocus.php
----------------------------------------------------------------------------


Current thread: