IISW-SV-000161 - An IIS Server configured to be a SMTP relay must require authentication.

Information

Anonymous SMTP relays are strictly prohibited. An anonymous SMTP relay can be a vector for many types of malicious activity not limited to server exploitation for the sending of SPAM mail, access to emails, phishing, DoS attacks, etc. Enabling TLS, authentication, and strictly assigning IP addresses that can communicate with the relay greatly reduce the risk of the implementation.

Solution

Configure the relay server with a specific allowed IP address, from the same network as the relay, and implement TLS.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_IIS_8-5_Y23M10_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-228573r879587_rule, STIG-ID|IISW-SV-000161, STIG-Legacy|SV-111855, STIG-Legacy|V-102893, Vuln-ID|V-228573

Plugin: Windows

Control ID: cbbfb71ac6fc7e32cf71115e1c4e0bf266afa4b27c27b1fe671fe0505647b769