We have setup an Exchange Front end mail
server in off of the optional port of our firewall, along with some other
monitoring/logging devices for internet access. Any of these devices do
not have an external IP address. Any mail that comes into our domain goes
through the front end mail server, where spam filtering and anti-virus occurs, it
then will pass any good email to our normal mail server, where virus checking
occurs once again, by a different product. All mail related ports go
through the front end mail server first. This setup works quite well for
us w/ no problems and was quite easy to setup Jonathan Jesse Network+, Linux+, A+ MCSA Network Specialist Founders Trust Personal Bank This page and any accompanying documents contain confidential
information intended for a specific individual and purpose. If you are
not the intended recipient, you are hereby notified that any disclosure,
copying, distribution, or use of the information contained herein (including
any reliance thereon) is strictly prohibited. If you received this
transmission in error, please immediately contact the sender and destroy the
material in its entirety, whether in electronic or hard copy format. From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Cerino I may be a little late – but –
may I ask why you are putting an Exchange server out in your DMZ? From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ I've been asked to open ports: tcp 135 tcp/udp 389 tcp/udp 88 tcp 3268 tcp 691 So we can have an exchange front end
server on our DMZ talk to exchange backend server on our internal
network. Has anyone done this and what's the security implications of
this?
|
- RE: [ActiveDir] Off-topic sorta Jonathan Jesse
- RE: [ActiveDir] Off-topic sorta Rimmerman, Russ
- RE: [ActiveDir] Off-topic sorta Brian Desmond