🚀 go-pugleaf

Chris,

See my SBS/Demon FAQ at my homepage.  Look under Other FAQs at:
  http://www.southdown.co.uk/users/jgrieve

Regards,
Jon





"Chris Zambas" <christosz*remove*@besafe.co.uk> wrote in message
news:969890818.353.0.nnrp-10.c2de8b30@news.demon.co.uk...
> Has anyone managed to get both these working together with packet
filtering
> & send/retrieve mail from Demon?!?!?!
>
> What a nightmare.
>
> Completely unsuccessfully so-far.  Any help would be gratefully
appreciated.
>
> I use SBS4.5 incidentally.
>
> Thanks,
> Chris
>
>

Thanks Jon,

Already spotted that on previous postings.  But it doesn't mention how to
tackle the proxy 2.0 packet filtering problem.

If I don't turn the packet filtering on, it leaves my system wide open to
attack.  unfortunately I don't have the resources to go to a hardware
firewall at the moment so I am relying on proxy2.0 to help me out.

thanks,
Chris


Jon Grieve <jgrieve@southdown.co.uk> wrote in message
news:969894755.1892.0.nnrp-10.d4f0f5e4@news.demon.co.uk...
> Chris,
>
> See my SBS/Demon FAQ at my homepage.  Look under Other FAQs at:
>   http://www.southdown.co.uk/users/jgrieve
>
> Regards,
> Jon
>
>
>
>
>
> "Chris Zambas" <christosz*remove*@besafe.co.uk> wrote in message
> news:969890818.353.0.nnrp-10.c2de8b30@news.demon.co.uk...
> > Has anyone managed to get both these working together with packet
> filtering
> > & send/retrieve mail from Demon?!?!?!
> >
> > What a nightmare.
> >
> > Completely unsuccessfully so-far.  Any help would be gratefully
> appreciated.
> >
> > I use SBS4.5 incidentally.
> >
> > Thanks,
> > Chris
> >
> >
>
>

Chris,

> If I don't turn the packet filtering on, it leaves my system wide open to
> attack.

Could you expand on that please.  I'm not sure I fully understand the
implications of what this option is for.

My understand -- probably wrong -- was that you could use this to control
inbound connections, should you choose to open up various ports - for
example, if your mail or Web server were 'behind' the proxy.

Jon

Try http://proxyfaq.networkgods.com/

"Chris Zambas" <christosz*remove*@besafe.co.uk> wrote:

>Thanks Jon,
>
>Already spotted that on previous postings.  But it doesn't mention how to
>tackle the proxy 2.0 packet filtering problem.
>
>If I don't turn the packet filtering on, it leaves my system wide open to
>attack.  unfortunately I don't have the resources to go to a hardware
>firewall at the moment so I am relying on proxy2.0 to help me out.
>
>thanks,
>Chris
>
>
>Jon Grieve <jgrieve@southdown.co.uk> wrote in message
>news:969894755.1892.0.nnrp-10.d4f0f5e4@news.demon.co.uk...
>> Chris,
>>
>> See my SBS/Demon FAQ at my homepage.  Look under Other FAQs at:
>>   http://www.southdown.co.uk/users/jgrieve
>>
>> Regards,
>> Jon
>>
>>
>>
>>
>>
>> "Chris Zambas" <christosz*remove*@besafe.co.uk> wrote in message
>> news:969890818.353.0.nnrp-10.c2de8b30@news.demon.co.uk...
>> > Has anyone managed to get both these working together with packet
>> filtering
>> > & send/retrieve mail from Demon?!?!?!
>> >
>> > What a nightmare.
>> >
>> > Completely unsuccessfully so-far.  Any help would be gratefully
>> appreciated.
>> >
>> > I use SBS4.5 incidentally.
>> >
>> > Thanks,
>> > Chris
>> >
>> >
>>
>>
>

--
Dave Mills

I run just Exch 5.5SP3 - gave up trying to get the routing via Proxy2!

Anyone succeeds please post the answer!

Andrew

-----Original Message-----
From: Chris Zambas [mailto:christosz*remove*@besafe.co.uk]
Posted At: 25 September 2000 15:09
Posted To: demon.ip.support.nt
Conversation: MSexhange5.5 & Proxy 2.0!!
Subject: MSexhange5.5 & Proxy 2.0!!


Has anyone managed to get both these working together with packet
filtering
& send/retrieve mail from Demon?!?!?!

What a nightmare.

Completely unsuccessfully so-far.  Any help would be gratefully
appreciated.

I use SBS4.5 incidentally.

Thanks,
Chris

I use sbs 4.5 as well, in fact it may have been my post that you were
referring to.
Still, I can't get this to work. I am rapidly starting to think that
Demon do something
weird with regards to working out who is connected. Once I have IP
filtering in place,
and have set up what /should/ be the correct filters, only a mailkick
from a demon tech
will start the mails flowing. I have tried setting a filter for identd
with remote host
set to any, I have set open stmp ports for all the demon mail servers I
could find IP 
addresses for (at least 15!). I even set a filter opening SMTP for both
directions and
any remote host IP but still no joy - unless Demon did a mailkick and
then the email
would come in. The weird thing was that I didn't have to drop and
reconnect. The 
filters worked fine and let in what they were supposed to. It seems that
Demon  just don't
send the mail. The Echange server is all ready to take the traffic, but
Demon just don't 
send! Now, since Demon don't support ETRN or TURN, how can we let them
know that we want
our mail? I assumed that the act of logging in would do it (as I guess
Demon did too) but 
what have we missed? 

Maybe we could collaborate via email once the group gets bored of us
SBSsers dissing Demon!
Sory to wibble, it's too late to be at work!!
Miles

I know a guy how deploys SBS all the time and with Demon accounts, the other
day he was telling me that he found a site with out packet filtering turn on
so enabled it, incoming mail stopped....This is what he did, selected these
ports to open from the built in list ( do not spec your own) SMTP, POP3,
HTTP & HTTPS and set open both ways. This will allow exchange to listen on
port 25 which Demon will deliver to.


"Miles Gaynor" <mg@castlehoward.co.uk> wrote in message
news:E604B4DA88E0D311B6A2009027E0197E0BD2E3@SBSSERVER...
> I use sbs 4.5 as well, in fact it may have been my post that you were
> referring to.
> Still, I can't get this to work. I am rapidly starting to think that
> Demon do something
> weird with regards to working out who is connected. Once I have IP
> filtering in place,
> and have set up what /should/ be the correct filters, only a mailkick
> from a demon tech
> will start the mails flowing. I have tried setting a filter for identd
> with remote host
> set to any, I have set open stmp ports for all the demon mail servers I
> could find IP
> addresses for (at least 15!). I even set a filter opening SMTP for both
> directions and
> any remote host IP but still no joy - unless Demon did a mailkick and
> then the email
> would come in. The weird thing was that I didn't have to drop and
> reconnect. The
> filters worked fine and let in what they were supposed to. It seems that
> Demon  just don't
> send the mail. The Echange server is all ready to take the traffic, but
> Demon just don't
> send! Now, since Demon don't support ETRN or TURN, how can we let them
> know that we want
> our mail? I assumed that the act of logging in would do it (as I guess
> Demon did too) but
> what have we missed?
>
> Maybe we could collaborate via email once the group gets bored of us
> SBSsers dissing Demon!
> Sory to wibble, it's too late to be at work!!
> Miles
>
>
>

Hmmm...

We've run into a similar problem: SBS 4.5 (= MS Exch 5.5 + MS Proxy 2.0
on the same machine), trying to collect inbound mail using SMTP. We've
added all the filter variations mentioned in this thread (including the
recommendations in Networkgods FAQ), but no joy unless we allow the
remote SMTP server to access all ports (port 25 alone doesn't work).
I'm worried about applying this "fix" long-term, in case someone spoofs
the Demon punt's IP address to get into our server... Is this
technically possible, or am I just paranoid (and ignorant ;-) )? Any
other suggestions?

Apologies in advance for the stupid questions. I'm new to NT admin, so
it's baptism by fire at this end!

Jason

In article <0XJF5.1007$fk2.109561@news1.cableinet.net>,
  "mak" <mek@kramweb.com> wrote:
> I know a guy how deploys SBS all the time and with Demon accounts,
the other
> day he was telling me that he found a site with out packet filtering
turn on
> so enabled it, incoming mail stopped....This is what he did, selected
these
> ports to open from the built in list ( do not spec your own) SMTP,
POP3,
> HTTP & HTTPS and set open both ways. This will allow exchange to
listen on
> port 25 which Demon will deliver to.
>


Sent via Deja.com http://www.deja.com/
Before you buy.