POP3

Hey there

I have just taken over a site who has SBS2000. While I was doing some
server maintenance I decided to run a port scan and found 4 ports open, one
of the was POP3. I closed them all down which was fine. I then found out
that the customer, when he is off-site downloads his email using pop3
directly off their SBS server via the internet. I know is is possible but I
have never seen it done before. Would you guys/gals class this as risky
having the POP3 port open to the world??

Cheers

Daniel.

rayfong
Sun Jul 20 17:06:23 CDT 2003

Username and password sent between POP3 is in clear text. I suggest to use
OWA rather than POP3, unless you enable SSL on the POP3 server.

319273 HOW TO: Help Secure Post Office Protocol Client Access in Exchange
2000
http://support.microsoft.com/?id=319273

Ray Fong
Microsoft SBS Product Support

This posting is provided "AS IS" with no warranties, and confers no rights.


>Hey there
>
>I have just taken over a site who has SBS2000. While I was doing some
>server maintenance I decided to run a port scan and found 4 ports open, one
>of the was POP3. I closed them all down which was fine. I then found out
>that the customer, when he is off-site downloads his email using pop3
>directly off their SBS server via the internet. I know is is possible but
I
>have never seen it done before. Would you guys/gals class this as risky
>having the POP3 port open to the world??
>
>Cheers
>
>Daniel.
>
>
>

Mark
Tue Jul 22 09:05:17 CDT 2003

opening that port is basically insane!! You should pro
host your email and pop from your server or have him TS
into Outlook leaving him with a teathered connection as
OWA is a security risk if you aren't running a VPN. BAD
setup there bro!



>-----Original Message-----
>Hey there
>
>I have just taken over a site who has SBS2000. While I
was doing some
>server maintenance I decided to run a port scan and found
4 ports open, one
>of the was POP3. I closed them all down which was fine.
I then found out
>that the customer, when he is off-site downloads his
email using pop3
>directly off their SBS server via the internet. I know
is is possible but I
>have never seen it done before. Would you guys/gals
class this as risky
>having the POP3 port open to the world??
>
>Cheers
>
>Daniel.
>
>
>.
>