Securing LDAP and MailMA Services

This document will explain the best practice for securing the above services.

As these services are designed for internal use their ports should not be publicly available on the internet. Their port numbers as standard are:

• LDAP - 389
• MailMA - 106

These ports should be blocked at the firewall level to restrict external access.

Further suggested options:

LDAP - If your end-users do not query the LDAP service for email addresses stored within MailSite then we recommend that you disable the service from starting.

MailMA - This service is used to administer MailSite from a remote location. If you perform all your MailSite administration locally on the Server it is advised that you disable this service from starting.

If you run MailSite Express on a separate server and/or specify something other than localhost within expresscfg.asp for the IMAP server then Mailma will be used. For best performance we suggest you use localhost for the IMAP server.

If you run commands such as msbox remotely, then mailma is used. We commend you run these commands directly on the server to avoid passing passwords as plain text through the network.

With advances in Remote Desktop technology we recommend you use RDP to remotely manage MailSite.