Penetration Testing mailing list archives

RE: publications concerning port forwarding


From: "Wiedemann, Adrian" <Adrian.Wiedemann () rz uni-karlsruhe de>
Date: Wed, 11 Apr 2007 21:02:39 +0200

Hi,

outlook to connect to exchange externally you are just asking for the box
to be owned. 

That's what I wrote. 

Exchange requires many ports to be opened if you are going to expose it to
the Internet and I'm not even sure you can find an article on how to do it
anymore because it's such a bad idea.

Not only because it is a bad idea. More because it's using RPC for direct
access. And since RPC is using dynamic ports, you have to open up a complete
port range. Even more, because Outlook ask the Global Catalog Servers for the
Offline-Addressbook ..

Ret

Regards, Adrian

Attachment: smime.p7s
Description:


Current thread: