Please notice: This article is more than 3 years old
Content, Source code or links may no longer be correct in the meantime.

40.000 Companies in Germany affected

The BSI (German Federal Authority for Informationsecurity) warns with the second highest level “orange” (= the IT threat situation is mission critical. massive disruption of regular operations) in the public media¹. Around 40,000 companies in Germany alone are affected by several critical vulnerabilities because security updates have not yet been installed². In fact, Heise speaks of playing Russian roulette³.

It’s not without reason that I have been warning for several years now about interlocking internal AD and internet functions like Microsoft does deliberatly. Unfortunately many hang their Exchange server directly “in the Internet” including OWA and EAS without any firewalls, mail gateways or reverse proxies. The normal case is totally negligent: Via port forwarding!

My personal point of view:

If you still use the combination Exchange/Outlook, you can’t be helped.

Last month I wrote a rant about this in my microblog⁴ and since then I have migrated further installations⁵. A full-fledged Exchange replacement based on Linux is up and running quickly. User accounts and data usually imported within one day. A change is possible without downtime.

I will be glad to help you.
Just contact me!

Tomas Jakobs