Case Scenario Exercise

You are the domain and Exchange administrator at the Baldwin Museum of Science. The museum is a much-respected and highly reputable organization that does not condone spam or junk mail. Due to its high public profile, the museum has been subjected to attacks from the Internet. In particular, viruses have been sent to museum staff in email attachments.

All the servers in your domain have recently been upgraded and have Windows Server 2003, Enterprise Edition installed. However, museum employees use a wide variety of workstations, including POP3 and IMAP4 clients. Currently the museum's ISP handles its external DNS resolution requirements. This can sometimes lead to delays due to slow name resolution, even though the museum has a permanent connection to the ISP.

Management has asked you to bring these problems under control.

Requirement 1 E-mails containing viruses have caused problems in the past because they were sent to staff members who did not have the knowledge required to deal with them. You have obtained and installed antivirus software. Nevertheless, management requires that you restrict the ability to send and receive Internet e-mail to a small group of users.

Requirement 2 Some staff members who need to send and receive Internet e-mail use POP3 or IMAP4 clients. You are required to ensure that these staff members have full e-mail functionality. At the same time you need to ensure that the museum's domain cannot be used to relay junk mail.

Requirement 3 You are asked to implement a DNS solution that enables the museum to handle its own external DNS resolution. Currently the museum uses Active Directory integrated DNS installed on its domain controllers to handle internal DNS name resolution, but it forwards external name resolution requests to its ISP.

Requirement 1

The first requirement stipulates that you restrict Internet e-mail access to a select group of users.

1. Management has given you a list of all the staff members that are allowed to send and receive Internet mail. How do you now ensure that these employees, and only these employees, can send and receive external e-mail, without restricting the ability of all employees to send and receive internal e-mail?

2. You are currently training an assistant administrator. She asks you why you configured delivery restrictions on an SMTP connector and not on an SMTP virtual server. What do you tell her?

Requirement 2

You must set up the e-mail system so that staff members who use use POP3 or IMAP4 clients have full e-mail functionality, while ensuring that the museum's domain cannot be used to relay junk e-mail.

1. You send an e-mail message to Kim Akers, an Exchange Full Administrator at Consolidated Messenger. Kim does not get the message. The message is short and has no attachments. You receive an NDR saying that your message was rejected because it came from an unsafe source. You need to send mail to Kim. How do you solve the problem?

2. You have disabled relaying on your default virtual server, but this has not solved your open relaying problem. What else do you need to check?

Requirement 3

You must implement a DNS solution that enables the museum to handle its own external DNS resolution.

1. You are asked to amend your DNS configuration so that name resolution over the Internet is handled by your DNS servers and not by the ISP. What DNS records do you need to change?