Prevent Telnet Access Exchange 2010

[network41]

Hi

Anyone know a way of preventing pupils , and teachers for that matter, from accessing Exchange server via telnet from their own laptops

Any assistance much appreciated

[oxide54]

can't you block the port with the firewall? only allow specifc ips / hosts

[FN-GM]

Remove Telnet?

[oxide54]

Remove Telnet?

 

i would rather protect the server.

 

its likely someone could still plugin their own device and run telnet.

[FN-GM]

i would rather protect the server.

 

its likely someone could still plugin their own device and run telnet.

 

I mean remove telnet from the server. No idea why one would want this anyway?

[oxide54]

I mean remove telnet from the server. No idea why one would want this anyway?

 

sorry i see what you mean, tbh i read it as they were telnetting onto port 25 and sending mail.

[SYNACK]

sorry i see what you mean, tbh i read it as they were telnetting onto port 25 and sending mail.

 

There is no way to determine the client type, smtp is 30 years old, it's just text on port 25 so there is no way to block just that. If you are using Outlook SMTP is only used for inter-server communication so you could simply deny the ip range of your local networks excluding the ones that actually need it like reporting applications and photocopiers.

 

SMTP is usually just for downlevel clients that can't use a more modern protocol like ActiveSync or Outlook RPC. You could also set internal to only be avalible with encrypted smtp which uses a cert and would just spew rubbish at them when they use telnet but you will still need unencrypted for servers from the internet.

[sukh]

The connector from what I remember is restricted. You have 2, Default& Client. Ckients conne t on 587 the Default isnt used by clients, only for server comm.. you seem to have a misconfig. Check your connector settings. Edited March 5, 2013 by sukh