RE: Exchange 2003 in the DMZ
+1 Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Don Ely [mailto:don@gmail.com] Sent: Friday, September 03, 2010 10:47 PM To: MS-Exchange Admin Issues Subject: Re: Exchange 2003 in the DMZ Put the FE on the inside with the other server and just publish 443 for OWA to the internet. You can do this with ISA in the DMZ or not On Fri, Sep 3, 2010 at 7:45 PM, Lynden A. Philadelphia lphiladelp...@philadelphiagroup.commailto:lphiladelp...@philadelphiagroup.com wrote: What do you suggest? Lynden From: Michael B. Smith [mailto:mich...@smithcons.commailto:mich...@smithcons.com] Sent: September-03-10 10:42 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2003 in the DMZ A little googling will give you what you want, with the magic phrase probably being static port assignments. That being said - don't do it. It's a hassle, it makes swiss cheese out of your firewall, and it isn't worth it. Exchange 2000/2003 were the only releases of Exchange to support putting an FE in a DMZ; and it was probably a mistake for them to support it. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.comhttp://theessentialexchange.com/ From: Lynden A. Philadelphia [mailto:lphiladelp...@philadelphiagroup.commailto:lphiladelp...@philadelphiagroup.com] Sent: Friday, September 03, 2010 9:53 PM To: MS-Exchange Admin Issues Subject: Exchange 2003 in the DMZ I have two Exchange servers. The main server is behind the firewall. I have a frontend server in the DMZ. What ports do I open between DMZ and inside network? What ports do I open from the DMZ to the WAN? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Exchange 2003 in the DMZ
A little googling will give you what you want, with the magic phrase probably being static port assignments. That being said - don't do it. It's a hassle, it makes swiss cheese out of your firewall, and it isn't worth it. Exchange 2000/2003 were the only releases of Exchange to support putting an FE in a DMZ; and it was probably a mistake for them to support it. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Lynden A. Philadelphia [mailto:lphiladelp...@philadelphiagroup.com] Sent: Friday, September 03, 2010 9:53 PM To: MS-Exchange Admin Issues Subject: Exchange 2003 in the DMZ I have two Exchange servers. The main server is behind the firewall. I have a frontend server in the DMZ. What ports do I open between DMZ and inside network? What ports do I open from the DMZ to the WAN? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Exchange 2003 in the DMZ
What do you suggest? Lynden From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: September-03-10 10:42 PM To: MS-Exchange Admin Issues Subject: RE: Exchange 2003 in the DMZ A little googling will give you what you want, with the magic phrase probably being static port assignments. That being said - don't do it. It's a hassle, it makes swiss cheese out of your firewall, and it isn't worth it. Exchange 2000/2003 were the only releases of Exchange to support putting an FE in a DMZ; and it was probably a mistake for them to support it. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Lynden A. Philadelphia [mailto:lphiladelp...@philadelphiagroup.com] Sent: Friday, September 03, 2010 9:53 PM To: MS-Exchange Admin Issues Subject: Exchange 2003 in the DMZ I have two Exchange servers. The main server is behind the firewall. I have a frontend server in the DMZ. What ports do I open between DMZ and inside network? What ports do I open from the DMZ to the WAN? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: Exchange 2003 in the DMZ
Put the FE on the inside with the other server and just publish 443 for OWA to the internet. You can do this with ISA in the DMZ or not On Fri, Sep 3, 2010 at 7:45 PM, Lynden A. Philadelphia lphiladelp...@philadelphiagroup.com wrote: What do you suggest? Lynden *From:* Michael B. Smith [mailto:mich...@smithcons.com] *Sent:* September-03-10 10:42 PM *To:* MS-Exchange Admin Issues *Subject:* RE: Exchange 2003 in the DMZ A little googling will give you what you want, with the magic phrase probably being “static port assignments”. That being said – don’t do it. It’s a hassle, it makes swiss cheese out of your firewall, and it isn’t worth it. Exchange 2000/2003 were the only releases of Exchange to support putting an FE in a DMZ; and it was probably a mistake for them to support it. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com http://theessentialexchange.com/ *From:* Lynden A. Philadelphia [mailto:lphiladelp...@philadelphiagroup.com] *Sent:* Friday, September 03, 2010 9:53 PM *To:* MS-Exchange Admin Issues *Subject:* Exchange 2003 in the DMZ I have two Exchange servers. The main server is behind the firewall. I have a frontend server in the DMZ. What ports do I open between DMZ and inside network? What ports do I open from the DMZ to the WAN? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
