|
规则名称 |
服务器角色 |
端口 |
程序 |
|
MSExchangeADTopology - RPC (TCP-In)
|
客户端访问、集线器传输、邮箱、统一消息
|
动态 RPC
|
Bin\MSExchangeADTopologyService.exe
|
|
MSExchangeMonitoring - RPC (TCP-In)
|
客户端访问、集线器传输、边缘传输、统一消息
|
动态 RPC
|
Bin\Microsoft.Exchange.Management.Monitoring.exe
|
|
MSExchangeServiceHost - RPC (TCP-In)
|
所有角色
|
动态 RPC
|
Bin\Microsoft.Exchange.ServiceHost.exe
|
|
MSExchangeServiceHost - RPCEPMap (TCP-In)
|
所有角色
|
RPC-EPMap
|
Bin\Microsoft.Exchange.Service.Host
|
|
MSExchangeRPCEPMap (GFW) (TCP-In)
|
所有角色
|
RPC-EPMap
|
任意
|
|
MSExchangeRPC (GFW) (TCP-In)
|
客户端访问、集线器传输、邮箱、统一消息
|
动态 RPC
|
任意
|
|
MSExchange - IMAP4 (GFW) (TCP-In)
|
客户端访问
|
143, 993 (TCP)
|
所有
|
|
MSExchangeIMAP4 (TCP-In)
|
客户端访问
|
143, 993 (TCP)
|
ClientAccess\PopImap\Microsoft.Exchange.Imap4Service.exe
|
|
MSExchange - POP3 (FGW) (TCP-In)
|
客户端访问
|
110, 995 (TCP)
|
所有
|
|
MSExchange - POP3 (TCP-In)
|
客户端访问
|
110, 995 (TCP)
|
ClientAccess\PopImap\Microsoft.Exchange.Pop3Service.exe
|
|
MSExchange - OWA (GFW) (TCP-In)
|
客户端访问
|
5075, 5076, 5077 (TCP)
|
所有
|
|
MSExchangeOWAAppPool (TCP-In)
|
客户端访问
|
5075, 5076, 5077 (TCP)
|
Inetsrv\w3wp.exe
|
|
MSExchangeAB-RPC (TCP-In)
|
客户端访问
|
动态 RPC
|
Bin\Microsoft.Exchange.AddressBook.Service.exe
|
|
MSExchangeAB-RPCEPMap (TCP-In)
|
客户端访问
|
RPC-EPMap
|
Bin\Microsoft.Exchange.AddressBook.Service.exe
|
|
MSExchangeAB-RpcHttp (TCP-In)
|
客户端访问
|
6002, 6004 (TCP)
|
Bin\Microsoft.Exchange.AddressBook.Service.exe
|
|
RpcHttpLBS (TCP-In)
|
客户端访问
|
动态 RPC
|
System32\Svchost.exe
|
|
MSExchangeRPC - RPC (TCP-In)
|
客户端访问、邮箱
|
动态 RPC
|
Bin\Microsoft.Exchange.RpcClientAccess.Service.exe
|
|
MSExchangeRPC - PRCEPMap (TCP-In)
|
客户端访问、邮箱
|
RPC-EPMap
|
Bin\Microsoft.Exchange.RpcClientAccess.Service.exe
|
|
MSExchangeRPC (TCP-In)
|
客户端访问、邮箱
|
6001 (TCP)
|
Bin\Microsoft.Exchange.RpcClientAccess.Service.exe
|
|
MSExchangeMailboxReplication (GFW) (TCP-In)
|
客户端访问
|
808 (TCP)
|
任意
|
|
MSExchangeMailboxReplication (TCP-In)
|
客户端访问
|
808 (TCP)
|
Bin\MSExchangeMailboxReplication.exe
|
|
MSExchangeIS - RPC (TCP-In)
|
邮箱
|
动态 RPC
|
Bin\Store.exe
|
|
MSExchangeIS RPCEPMap (TCP-In)
|
邮箱
|
RPC-EPMap
|
Bin\Store.exe
|
|
MSExchangeIS (GFW) (TCP-In)
|
邮箱
|
6001, 6002, 6003, 6004 (TCP)
|
任意
|
|
MSExchangeIS (TCP-In)
|
邮箱
|
6001 (TCP)
|
Bin\Store.exe
|
|
MSExchangeMailboxAssistants - RPC (TCP-In)
|
邮箱
|
动态 RPC
|
Bin\MSExchangeMailboxAssistants.exe
|
|
MSExchangeMailboxAssistants - RPCEPMap (TCP-In)
|
邮箱
|
RPC-EPMap
|
Bin\MSExchangeMailboxAssistants.exe
|
|
MSExchangeMailSubmission - RPC (TCP-In)
|
邮箱
|
动态 RPC
|
Bin\MSExchangeMailSubmission.exe
|
|
MSExchangeMailSubmission - RPCEPMap (TCP-In)
|
邮箱
|
RPC-EPMap
|
Bin\MSExchangeMailSubmission.exe
|
|
MSExchangeMigration - RPC (TCP-In)
|
邮箱
|
动态 RPC
|
Bin\MSExchangeMigration.exe
|
|
MSExchangeMigration - RPCEPMap (TCP-In)
|
邮箱
|
RPC-EPMap
|
Bin\MSExchangeMigration.exe
|
|
MSExchangerepl - Log Copier (TCP-In)
|
邮箱
|
64327 (TCP)
|
Bin\MSExchangeRepl.exe
|
|
MSExchangerepl - RPC (TCP-In)
|
邮箱
|
动态 RPC
|
Bin\MSExchangeRepl.exe
|
|
MSExchangerepl - RPC-EPMap (TCP-In)
|
邮箱
|
RPC-EPMap
|
Bin\MSExchangeRepl.exe
|
|
MSExchangeSearch - RPC (TCP-In)
|
邮箱
|
动态 RPC
|
Bin\Microsoft.Exchange.Search.ExSearch.exe
|
|
MSExchangeThrottling - RPC (TCP-In)
|
邮箱
|
动态 RPC
|
Bin\MSExchangeThrottling.exe
|
|
MSExchangeThrottling - RPCEPMap (TCP-In)
|
邮箱
|
RPC-EPMap
|
Bin\MSExchangeThrottling.exe
|
|
MSFTED - RPC (TCP-In)
|
邮箱
|
动态 RPC
|
Bin\MSFTED.exe
|
|
MSFTED - RPCEPMap (TCP-In)
|
邮箱
|
RPC-EPMap
|
Bin\MSFTED.exe
|
|
MSExchangeEdgeSync - RPC (TCP-In)
|
集线器传输
|
动态 RPC
|
Bin\Microsoft.Exchange.EdgeSyncSvc.exe
|
|
MSExchangeEdgeSync - RPCEPMap (TCP-In)
|
集线器传输
|
RPC-EPMap
|
Bin\Microsoft.Exchange.EdgeSyncSvc.exe
|
|
MSExchangeTransportWorker - RPC (TCP-In)
|
集线器传输
|
动态 RPC
|
Bin\edgetransport.exe
|
|
MSExchangeTransportWorker - RPCEPMap (TCP-In)
|
集线器传输
|
RPC-EPMap
|
Bin\edgetransport.exe
|
|
MSExchangeTransportWorker (GFW) (TCP-In)
|
集线器传输
|
25, 587 (TCP)
|
任意
|
|
MSExchangeTransportWorker (TCP-In)
|
集线器传输
|
25, 587 (TCP)
|
Bin\edgetransport.exe
|
|
MSExchangeTransportLogSearch - RPC (TCP-In)
|
集线器传输、边缘传输、邮箱
|
动态 RPC
|
Bin\MSExchangeTransportLogSearch.exe
|
|
MSExchangeTransportLogSearch - RPCEPMap (TCP-In)
|
集线器传输、边缘传输、邮箱
|
RPC-EPMap
|
Bin\MSExchangeTransportLogSearch.exe
|
|
SESWorker (GFW) (TCP-In)
|
统一消息
|
任意
|
任意
|
|
SESWorker (TCP-In)
|
统一消息
|
任意
|
UnifiedMessaging\SESWorker.exe
|
|
UMService (GFW) (TCP-In)
|
统一消息
|
5060, 5061
|
任意
|
|
UMService (TCP-In)
|
统一消息
|
5060, 5061
|
Bin\UMService.exe
|
|
UMWorkerProcess (GFW) (TCP-In)
|
统一消息
|
5065, 5066, 5067, 5068
|
任意
|
|
UMWorkerProcess (TCP-In)
|
统一消息
|
5065, 5066, 5067, 5068
|
Bin\UMWorkerProcess.exe
|
|
UMWorkerProcess - RPC (TCP-In)
|
统一消息
|
动态 RPC
|
Bin\UMWorkerProcess.exe
|
注意：