Detections
Analytics
IIST-SV-000160 - An IIS Server configured to be a SMTP relay must require authentication.
Information
Anonymous SMTP relays are strictly prohibited. An anonymous SMTP relay can be a vector for many types of malicious activity not limited to server exploitation for the sending of SPAM mail, access to emails, phishing, DoS attacks, etc. Enabling TLS, authentication, and strictly assigning IP addresses that can communicate with the relay greatly reduce the risk of the implementation.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Configure the relay server with a specific allowed IP address, from the same network as the relay, and implement TLS.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_IIS_10-0_Y26M07_STIG.zip
Item Details
Audit Name: DISA Microsoft IIS 10.0 Server STIG v3r7
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-228572r960963_rule, STIG-ID|IIST-SV-000160, STIG-Legacy|SV-111857, STIG-Legacy|V-102895, Vuln-ID|V-228572
Plugin: Windows
Control ID: 4a82d1870797a6d09ad4aedf860b5132e5256b421c40d745fdf47f5c96427346