exchange redirect - how secure?

11 Feb 2009 2:19 PM

snowhntr

I have added a contact in ADUC for an outside email account (yahoo) so
I can test redirect from the exchange server. It took a while, but it
is working. Now when anyone sends an email to my exchange account, is
goes to that inbox as well as being "redirected" to the external yahoo
pop account. I also have OWA working with SSL. My question is: how
secure is redirecting to an outside the domain, private pop3 account?
What is the best way that I can secure this. Can I get another SSL
certificate and somehow secure this? This is all because the GM here
wants his exchange mailbox email sent to his cell phone so he can get
mail on the road. I am wary of doing this because I do not this this
is secure, and account info may be being sent in the clear.
Anyone have some insight on this?
Thank you,
Chris

11 Feb 2009 2:39 PM

Andy David {MVP}

On Wed, 11 Feb 2009 06:19:01 -0800 (PST), snowh***@gmail.com wrote:

Show quoteHide quote

>I have added a contact in ADUC for an outside email account (yahoo) so
>I can test redirect from the exchange server. It took a while, but it
>is working. Now when anyone sends an email to my exchange account, is
>goes to that inbox as well as being "redirected" to the external yahoo
>pop account. I also have OWA working with SSL. My question is: how
>secure is redirecting to an outside the domain, private pop3 account?
>What is the best way that I can secure this. Can I get another SSL
>certificate and somehow secure this? This is all because the GM here
>wants his exchange mailbox email sent to his cell phone so he can get
>mail on the road. I am wary of doing this because I do not this this
>is secure, and account info may be being sent in the clear.
>Anyone have some insight on this?
>Thank you,
>Chris

Why not have him use an Windows Mobile device and Active Sync instead?

11 Feb 2009 4:25 PM

snowhntr

On Feb 11, 9:39 am, Andy David {MVP}
<ada***@pleasekeepinngcheesebucket.com> wrote:
Show quoteHide quote

> On Wed, 11 Feb 2009 06:19:01 -0800 (PST), snowh***@gmail.com wrote:
> >I have added a contact in ADUC for an outside email account (yahoo) so
> >I can test redirect from the exchange server. It took a while, but it
> >is working. Now when anyone sends an email to my exchange account, is
> >goes to that inbox as well as being "redirected" to the external yahoo
> >pop account. I also have OWA working with SSL. My question is: how
> >secure is redirecting to an outside the domain, private pop3 account?
> >What is the best way that I can secure this. Can I get another SSL
> >certificate and somehow secure this? This is all because the GM here
> >wants his exchange mailbox email sent to his cell phone so he can get
> >mail on the road. I am wary of doing this because I do not this this
> >is secure, and account info may be being sent in the clear.
> >Anyone have some insight on this?
> >Thank you,
> >Chris
>
> Why not have him use an Windows Mobile device and Active Sync instead?

Becuase I spent two weeks getting OWA secured w/ SSL and working to a
Windows Mobile Device and Active Sync, then after explaining to my
manger that all we need is to get the right phones and data contracts
and we are good to go. Then they rushed right out and bought
BlackBerries, and Non-MS based devices. I am angry beyond belief about
this. They don't listen to me, and they think they know better.
So, I now have to find a cheap, secure way to get this to non-MS cell
phones. This is what I am working with now.

11 Feb 2009 4:39 PM

Mark Arnold [MVP]

Classic.
Well, you have great security when the email is on your server. Before
it comes into you it's utterly in the clear and readable by the entire
world. When you forward it back out again it's clear and readable by
the entire world.

11 Feb 2009 5:13 PM

Martin Blackstone [MVP]

Plus now you have the added joy of knowing its on some uncontrolled device
somewhere....

Show quoteHide quote

"Mark Arnold [MVP]" <m***@mvps.org> wrote in message
news:1pv5p4dh6v938j81lsubpceddte8kipm7v@4ax.com...
> Classic.
> Well, you have great security when the email is on your server. Before
> it comes into you it's utterly in the clear and readable by the entire
> world. When you forward it back out again it's clear and readable by
> the entire world.

12 Feb 2009 1:25 PM

snowhntr

Show quote Hide quote

On Feb 11, 12:13 pm, "Martin Blackstone [MVP]" <mart***@myrealbox.com>
wrote:
> Plus now you have the added joy of knowing its on some uncontrolled device
> somewhere....
>
> "Mark Arnold [MVP]" <m***@mvps.org> wrote in messagenews:1pv5p4dh6v938j81lsubpceddte8kip***@4ax.com...
>
>
>
> > Classic.
> > Well, you have great security when the email is on your server. Before
> > it comes into you it's utterly in the clear and readable by the entire
> > world. When you forward it back out again it's clear and readable by
> > the entire world.- Hide quoted text -
>
> - Show quoted text -

Thank Guys, I feel so much better now. Sometimes I wonder why I just
don't stay in the server room and play Quake all day. Why bother. We
build secure systems with layers of security, have to grovel for the
funds to do it, educate ourselves on the latest threats and try to
protect everyone from them, and then all it takes is one moron (the
Bambi in purchasing type "well, I didn't know") and the whole thing
comes crashing down. And guess who gets to fix it? Does anyone have
the number for that truck driving school?
<sigh>

12 Feb 2009 1:33 PM

Martin Blackstone [MVP]

<snowh***@gmail.com> wrote in message

news:613d7167-495e-4e90-ba10-576390374f6e@s9g2000prg.googlegroups.com...
> On Feb 11, 12:13 pm, "Martin Blackstone [MVP]" <mart***@myrealbox.com>
>
> Thank Guys, I feel so much better now. Sometimes I wonder why I just
> don't stay in the server room and play Quake all day. Why bother. We
> build secure systems with layers of security, have to grovel for the
> funds to do it, educate ourselves on the latest threats and try to
> protect everyone from them, and then all it takes is one moron (the
> Bambi in purchasing type "well, I didn't know") and the whole thing
> comes crashing down. And guess who gets to fix it? Does anyone have
> the number for that truck driving school?
> <sigh>

I stare out the windows at the landscapers and think "Ill bet nobody calls
them at 11 PM on Sat nights to work".

Thread options