RE: [ActiveDir] Off-topic sorta

[Jonathan Jesse]

We have setup an Exchange Front end mail server in off of the optional port of our firewall, along with some other monitoring/logging devices for internet access.  Any of these devices do not have an external IP address.  Any mail that comes into our domain goes through the front end mail server, where spam filtering and anti-virus occurs, it then will pass any good email to our normal mail server, where virus checking occurs once again, by a different product.  All mail related ports go through the front end mail server first.  This setup works quite well for us w/ no problems and was quite easy to setup   Jonathan Jesse Network+, Linux+, A+ MCSA Network Specialist Founders Trust Personal Bank   This page and any accompanying documents contain confidential information intended for a specific individual and purpose.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is strictly prohibited.  If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format.  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Cerino Sent: Thursday, October 07, 2004 7:55 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Off-topic sorta   I may be a little late – but – may I ask why you are putting an Exchange server out in your DMZ?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rimmerman, Russ Sent: Wednesday, October 06, 2004 4:51 PM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Off-topic sorta   I've been asked to open ports:   tcp 135 tcp/udp 389 tcp/udp 88 tcp 3268 tcp 691   So we can have an exchange front end server on our DMZ talk to exchange backend server on our internal network.  Has anyone done this and what's the security implications of this? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~