Locking Down SMTP

SMTP is the de facto messaging standard—not only for Exchange Server 2003 but also for the industry. This service is not built into Exchange Server 2003 but rather is a service provided by Windows Server 2003. Nonetheless, SMTP security and other parameters can be easily configured through the Exchange System Manager (ESM).

General SMTP Security Best Practices

Some general security best practices for SMTP include, but are not limited to, the following:

  • Limit Message Size Limiting the size of incoming and outgoing emails not only helps save disk space on the Exchange Server 2003 server, it also minimizes Denial of Service (DoS) vulnerabilities.

  • Disable Auto-replies The classic out-of-office or on-vacation message that users ...

Get Microsoft® Exchange Server 2003 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.