[duhmez]

I was reading on m$ website about exchange server 2003 features, and I saw the exchange(rpc) access over http, as an option. It did not expand on this point at all and there are obvious questions.

I've got one site that houses our server (currently 5.5) and the users at this site use exchange locally foir their mail, so all messages are backup up on the serverm always. Exchange(rpc) over http, is it ordinary rpc? Because if it is that would smell like a huge security hole, and rpc is blocked between our sites and we are considering VPN to enable exchange mail instead of pop3, so our roaming users can have their mail at all sites handy.

The server is currently a web and email server with proxy 2.0, and may get upgraded to 2003 server and ISA server.

The question ism is this a "quasi" rpc interface to enable the exchange mail instead of pop3, or is it merely REAL rpc over port 80, thereby a massive security hole?

[sapiens74]

IM running the beta and have it blocked at the Firewall

Shouldn't be an issue on the intranet though.

I believe the latest worm takes advantage of the RPC service itself, and I don't believe it will affect exchange using that capability

[adamvjackson]

Currently, quite a few large ISPs have the RPC ports blocked on all but commerical accounts, and yes, Exchange does use the standard RPC ports.

[duhmez]

VPN IT IS THEN.