Security

By default, security is not enabled for NNTP newsfeeds. However, you can specify the account and password that your Microsoft Exchange Server computer uses to log on to remote servers and the account that the remote servers use to log on to your server. You can also set your Microsoft Exchange Server computer so that it requires Secure Sockets Layer (SSL) to be used when communicating with other servers. SSL is a protocol that encrypts all data sent between NNTP servers.

Microsoft Exchange Server provides several additional options to improve the security of connections. For more information, see "Authentication" later in this chapter.

Getting to the Security property page

1. In the Administrator window, choose a site, and then choose Connections.
2. Double-click your newsfeed.
3. Select the Security tab.

Requiring Secure SSL Connections

You can configure your Microsoft Exchange Server computer to require remote host computers to use SSL encryption when connecting to Microsoft Exchange Server. If Microsoft Exchange Server is configured to require SSL, SSL is used when other hosts initiate push feeds to Microsoft Exchange Server. It is also used when Microsoft Exchange Server initiates push and pull feeds to other hosts. In order for a remote host to log on to the Microsoft Exchange Server computer using SSL, SSL must be enabled on both servers.

To use SSL, Microsoft Internet Information Server (IIS) must be installed on the Microsoft Exchange Server computer before Microsoft Exchange Server is installed, and the Microsoft Exchange Server service account must be granted Administrator permissions for the local computer. In addition, you must complete the following procedure.

1. In the Internet Information Server Key Manager, choose the NNTP protocol icon.
2. Create a key request by choosing Create New Key from the Key menu, and type the required information.
3. Obtain a certificate from a Certificate Authority.
4. Under the NNTP protocol, select the key request, and then choose Install Key Certificate from the Key menu.
5. Select the default server connection or type the server's IP address to bind the key to any inbound connection.

For information about setting up SSL, see your IIS documentation.

Complete the following steps to require SSL connections for this newsfeed.

1. Select the Security tab.
2. Select Require secure connection (SSL).

For more information about setting up SSL, see your Internet Information Server documentation.

Setting Up an Account and Password for Outbound Connections

You can set the account and password for all outbound host connections. Your Microsoft Exchange Server computer uses this account and password to connect to your newsfeed provider's host computer. The account name and password are supplied by your newsfeed provider.

Note   The account name and password for outbound host connections are case-sensitive.

1. Select the Security tab.
2. In the Log in to remote servers as box, type the account name.
If the remote server is running Windows NT Server, you should specify the domain and user name in this box, for example, Domain\suzanf.
3. In the Password box, type the password.

Setting Up a Mailbox or Custom Recipient for
Inbound Connections

You can specify the Microsoft Exchange Server mailbox or custom recipient that your newsfeed provider's host computer uses to log on to your Microsoft Exchange Server computer.

Note   The password for inbound host connections is case-sensitive.

1. Select the Security tab.
2. Under Inbound connections, choose Change.
3. Select the Microsoft Exchange Server mailbox or custom recipient that will be used to authenticate remote servers that log on to your Microsoft Exchange Server computer.
If you do not specify a mailbox or custom recipient, no authentication is required for hosts to connect to your server.