Wednesday, March 7, 2012

Mail Profile

Hey Guys / Gals,
I am looking to setup SQL Mail profile on the sql servers but I am concerned
that mail enabling the sql boxes poses a security risks. Any truth to this?
Is there a way to relay from our Exchange servers instead? Or am I turning
those boxes into OUtlook clients once the mapi profiles are created?
Thanks,
-wp
Hi
"Wild Packet" wrote:

> Hey Guys / Gals,
> I am looking to setup SQL Mail profile on the sql servers but I am concerned
> that mail enabling the sql boxes poses a security risks. Any truth to this?
> Is there a way to relay from our Exchange servers instead? Or am I turning
> those boxes into OUtlook clients once the mapi profiles are created?
> Thanks,
> -wp
>
You don't say which version of SQL server you are using! SQL 2000's database
mail requires a MAPI client, which mean't installing Outlook, which you may
not want to do on a server. Alternatively there was xpsmtp mail
http://www.sqldev.net/xp/xpsmtp.htm , which allowed you to emails via SMTP.
SQL 2005 has SMTP emails inbuilt.
If you are sending emails you will need to configure the firewalls to allow
outgoing traffic which will be less secure than blocking the ports totally.
John
|||"Wild Packet" <wp@.contoso.com> wrote in message
news:ujvps6aZHHA.208@.TK2MSFTNGP05.phx.gbl...
> Hey Guys / Gals,
> I am looking to setup SQL Mail profile on the sql servers but I am
> concerned that mail enabling the sql boxes poses a security risks. Any
> truth to this?
>
Yes and no. Depends on your setup.
If you simply don't allow any mail to get to the Mail profile, that'll help.

> Is there a way to relay from our Exchange servers instead? Or am I turning
> those boxes into OUtlook clients once the mapi profiles are created?
What I've done is install Outlook and point it to a local SMTP server on the
same box as SQL Server and have that relay to the upstream mail server.
This way I could pretty much guarantee messages making it OUT with Outlook
hanging, etc.

> Thanks,
> -wp
>
Greg Moore
SQL Server DBA Consulting
Email: sql (at) greenms.com http://www.greenms.com

No comments:

Post a Comment