Replies to internet - general opinion

[alfie1noakes]

I have a question for the experienced..

We have Exchange Server 5.5, and as standard, I do not have "replies to internet" turned on.

I do this as, the way I have learned, is that it can pose a security threat in terms of viruses being able to mass mail from users mailboxes etc..

But one of the draw backs is that our "out of office" replies only work within our organisation. Also, any auto forwards to external people do not work.

Am I right to be cautious, or should I turn on"replies to internet"?

We do have virus checkers at desktop, and at exchange level.

Cheers guys

Andy

 

[NetIntruder]

I personally hate out of office allowed to the Internet. I go on vacation and when i come back, half of my listserve's are gone!

~Intruder~

"The Less You Do, The Less Can Go Wrong"

 

[DestinysDream]

I have mine turned on and use NAVMSE and local computer software with no major virus issues. Occassionally one slips by but that is probably normal.

If anyone calls and says "I know a little something about computers" just tell them to reformat it.

 

[Griffyn]

I would consider Out of Office replies to be a major security hole. For social engineering. Many people will put an extraordinary amount of personal information in their out of office message, that could tell somebody that they'll be out of the country for x weeks, that Joe Smith is doing their job for the next few weeks, what their direct phone line number is, etc. etc. etc. which can be a gold-mine for somebody about to launch social engineering attack on the company.