We have a security problem on one of our domino servers. From outside the company, anyone can open a browser and enter:
http://myserversdnsname/catalog.nsf/domainquery
and then the browser will show our catalog.nsf in full view. I don’t know to correct this so any help is appreciated
Subject: exposed catalog.nsf
If you don’t know enough to protect a Domino server exposed on the web, you shouldn’t expose it at all. You need to study up on all the security aspects of Domino before opening up your server to the world.
/Peter
Subject: RE: exposed catalog.nsf
I know that you are correct about this and I am not comfortable with the situation that I have been thrust into here at work. Suffice it to say that I do need to get up to speed as quickly as possilbe on these security issues.
Subject: exposed catalog.nsf
Check the ACL for catalog.nsf. There should be an entry for ‘Anonymous’ change its access to ‘No Access’. If there is no entry for Anonymous, add one.
hope that helps…
Subject: RE: exposed catalog.nsf
That has resolved the immediate issue. Thanks for the reply