Microsoft Security Updates

2009-02-12T01:12:00.001-08:00

Below you will find the most recent Critical updates posted my Microsoft with a description and link to obtain them.

MS09-002/KB961260 — Critical (XP, Vista)/Moderate (2003, 2008): This patch addresses two previously undisclosed security holes in IE7 that could allow remote code executions. This one lets it happen right through the Web page itself, so it is pretty darned nasty. You will want to install this patch ASAP. This patch also fixes two other minor issues with IE7 (KB950060 and KB958585).
MS09-003/KB959239 — Critical (Exchange 2000, Exchange 2003, and Exchange 2007): This patch fixes two previously undisclosed vulnerabilities in Exchange. One of them is really nasty, allowing a remote code execution attack. The other one is slightly less nasty, allowing the attacker to shut down the Exchange System Attendant and a number of other services. If you have an Exchange server, you will want to apply this patch immediately.

We highly recommend applying the mentioned updates rapidly, you may contact us at any time if you require any further clairifcations or assistance at Info@Gobiit.com

GOBI IT Solutions | URL: www.Gobiit.com

How to Secure Your Exchange Server

2009-02-11T00:15:00.000-08:00

In the Business world today, Email is the main means of communications for both critical and non critical information, having a reliable Email services is the main concern of any business operator.
in this blog i will give you 10 ways to have a reliable Exchange server and secured Email services.

Tip1: Disable open relaying on all SMTP virtual servers:
Open relay on your Exchange Server allow other Email servers to use your server as a gateway to others, this allows other to send spam Email which appears to be originated from your address, therefore you will be identified as a spam source.

Tip 2: Prevent anonymous access on internal SMTP virtual servers and dedicated SMTP virtual servers for IMAP and POP clients:
Because all Exchange servers within your organization authenticate with each other to send mail, you do not need to enable anonymous access on your internal Simple Mail Transfer Protocol (SMTP) virtual servers. Additionally, all Post Office Protocol (POP) and Internet Message Access Protocol (IMAP) clients authenticate with your SMTP virtual server, so anonymous access is not required on a server that is used exclusively by POP and IMAP clients

Tip 3: Restricting Submissions to Distribution Lists and Users:
Restrict who can send e-mail messages to an individual user or a distribution list. Restricting submissions on a distribution list prevents non-trusted senders, such as unauthorized Internet users, from sending mail to an internal-only distribution list.

Tip 4: Digitally sign and Encrypt your Email:
Digitally signing and Encrypting your Email prevents any one to intercept and read your Email and makes sure it is only opened by the person you sent the message to.

Tip 5: Educate your users not to open Email attachments from unknown users:
Attachments could include programs that starts sending Spam email messages to multiple users within your address list that could cause you troubles.

Tip 6: Backup your Exchange server periodically:
Always backup your Exchange Server so when disaster happens you will be ready.

-------------------------------------------------------------------------------------------------

Http://www.Gobiit.com
New York and Connecticut IT Support and Network Consulting

GOBI IT Solutions - Network Consulting and IT Services in New York and Connecticut

Microsoft Security Updates

How to Secure Your Exchange Server