[PEN-TEST] Testing MS Exchange

[Stephen Quigg <Stephen.Quigg () PACONSULTING COM>]

I am currently looking at some work involving Microsoft Exchange and Open
Relays, most notably stopping many installed versions of Exchange acting as
one!

Does anyone have any knowledge in this area to share, and things I should be
looking out for. This will include configurable options within exchange
other than the generic ones to stop it being used as an Open Relay.

I'm perfectly happy doing a network/IDS/Firewall/Server level vulnerability
scan & risk analysis, but am anxious to gain the list's experience in this
area.

regards,
Stephen

Stephen Quigg
PA Consulting Group
+44 (0)141 241 6445
+44 (0)788 754 0020

DISCLAIMER: This e-mail contains proprietary information some or all of
which may be legally privileged.  It is for the intended recipient only.
If an addressing or transmission error has misdirected this e-mail,
please notify the author by replying to this e-mail.  If you are not the
intended recipient you must not use, disclose, distribute, copy, print,
or rely on this e-mail.