|
You don't need to purchase a certificate from VeriSign to use HTTPS. You basically have two choices when it comes to configuring SSL (which requires the use of certificates): (1) purchase a certificate from a third-party certificate authority such as Verisign, Thawte and others; or (2) use Microsoft Certificate Server and install your own certificate authorities.
For details on configuring SSL for OWA, see Knowledge Base article Q320291. For details on using IIS 5.0 with Certificate Server 2.0, see KB Q299525. See also Q228984.
As for open relay databases, the one I am most familiar with is http://ordb.org. However, last time I checked, this database solution could not be used with Exchange 2000 or IIS. I would have a look at this KB article that discusses ways to prevent unsolicited commercial e-mails and spam. I do recommend the DNS reverse lookup mentioned in this article. (See Q297412 for details on configuring that.)
|