Are your users in the DMZ as well ? -----Original Message----- From: Woodrick, Ed [mailto:[EMAIL PROTECTED]] Sent: 15 March 2002 02:14 To: Exchange Discussions Subject: RE: Change password for Exchange in DMZ
So what the heck is on the internal LAN? You've moved every piece of sensitive information into public view. One REALLY big thing to consider is traffic to the server. Are your routers and firewalls fast enough to handle approximately 60% of your current network traffic going to the DMZ? Yep, 60% is probably a pretty good estimate of the amount of your LAN that Email is using. ____________________________________________________________ Having machines that straddle a NAT registering in the same WINS/DNS is going to cause problems. ed -----Original Message----- From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] Posted At: Thursday, March 14, 2002 4:37 PM Posted To: Microsoft Exchange Conversation: Change password for Exchange in DMZ Subject: RE: Change password for Exchange in DMZ The domain controller, Wins Server, and Exchange server are all in the DMZ. I can go over in the DMZ access the test account and I can change the password. If I go back over into the private network 10.n.n.n and get into the same account, then I cannot change the corresponding password. -----Original Message----- From: Andrew Chan [mailto:[EMAIL PROTECTED]] Sent: Thursday, March 14, 2002 3:17 PM To: Exchange Discussions Subject: RE: Change password for Exchange in DMZ Agreed, but if he CAN authenticate the test users, then the job of locating the DC is fulfilled. There is no more ties of WINS to Password any more. I guess I wasn't clear when I made that second comment. Andrew, MCSE (NT & W2K) + CCNA -----Original Message----- From: Roger Seielstad [mailto:[EMAIL PROTECTED]] Posted At: Thursday, March 14, 2002 12:04 PM Posted To: DiscussionGroup Conversation: Change password for Exchange in DMZ Subject: RE: Change password for Exchange in DMZ The second question is easy - WINS is needed to find the Domain controllers so you CAN change the password ------------------------------------------------------ Roger D. Seielstad - MCSE Sr. Systems Administrator Peregrine Systems Atlanta, GA > -----Original Message----- > From: Andrew Chan [mailto:[EMAIL PROTECTED]] > Sent: Thursday, March 14, 2002 2:40 PM > To: Exchange Discussions > Subject: RE: Change password for Exchange in DMZ > > > Are you saying that your Exchange server in the DMZ are in the same > domain as your corporate? > > Also, I am a little baffled. Since when does WINS have anything to do > with Password change? > > Andrew, > MCSE (NT & W2K) + CCNA > > > -----Original Message----- > From: Pfefferkorn, Pete (PFEFFEPE) [mailto:[EMAIL PROTECTED]] > Posted At: Thursday, March 14, 2002 11:26 AM Posted To: > DiscussionGroup > Conversation: Change password for Exchange in DMZ > Subject: Change password for Exchange in DMZ > > > Exchange 5.5 SP3. > > I've been instructed to move our Exchange deployment into our DMZ. I > know...I know...VPN, not my decision. We're performing a test and put > a Wins and Exchange server over in the DMZ, created a few test > accounts. > > We can get in from our private network with no problems. The issue > I'm seeing is trying to change the password of an account. We have > the WINS in the private network pulling from the Wins in the DMZ. If > I point to the WINS in the private which is aware of the WINS in the > DMZ, I still cannot change the password. > > Do I have to open up a specific port for the WINS in the DMZ to the > private? > > Pete Pfefferkorn > Senior Systems Engineer/Mail Administrator > University of Cincinnati > 51 Goodman Street > Cincinnati, OH 45221 > Phone - (513) 556-9076 > Fax - (513) 556-2042 > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Archives: http://www.swynk.com/sitesearch/search.asp > To unsubscribe: mailto:[EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]