You're an admin! You're an admin! You're all admins, thanks to this Microsoft Exchange zero-day and exploit

Re: Possible quick fix

Did you realise that Exchange isn't just 'an email server'? At least recommend something like Zimbra to cover calenders and a web ui, then you might as well use Samba v4 (I assume we're ignoring the fact it's based on Microsoft code) to give you proper single sign on, and there's not really any equivalent to Group Policy, but I suppose we could use something like Puppet to provide consistency across users desktops.

So, once you've hooked up all those different Open Source programs and got them all working (probably not as turn-key as setting up a Windows domain), what's the betting that you've inadvertently left a similarly glaring security hole?

Re: Possible quick fix

Bob...

New to information security and/or application development are you?

You're too fixated on an issue without looking at the entire requirement(s) a product is meant to provide.

You're 'solution' doesn't even come close to providing a work around for Exchange.

Also, thinking Linux is so much more secure than Windows is short sided and short minded.

Especially when both require humans to build and configure them--not to mention the applications running on top of the OS.

Re: Possible quick fix

shirley you mean freebsd?

Re: Possible quick fix

I've used cyrus for the past 19 years now.. for email it works great(though the migration from v1 to v2 was quite painful - though I haven't run email for a corporate type environment since 2002 and at the time it was Cyrus). Since then the only email hosting I have done is just my personal and family stuff.

I don't have opinions strong enough to try to talk someone else into what email solution to use, but I wanted to (sadly) mention this that I noticed last year:

https://www.cmu.edu/computing/services/comm-collab/email-calendar/cyrus/decommission.html

made me kinda feel sick inside (the main reason of course being they built Cyrus, am not sure how much involvement they have in it today).

I have been a user of office 365 for the past 6 years or so(I don't work in corporate IT so have never managed exchange). I don't have major complaints. I'm certainly not the office power user who leverages their stuff more so can understand those who need that groupware functionality. I could get by with just IMAP without an issue though I know many others need much more than that. Office 2010 on windows 7 and OWA on Linux and email on android all seem to work ok.

Re: Possible quick fix

if your exchange serve is THAT constrained them you should be looking at respeccing.

For once I'm glad we still use Exchange 2010 SP3 :)