Re: Mail server inside the network...Safe?



On Sep 10, 11:45 am, Ansgar -59cobalt- Wiechers
<usenet-2...@xxxxxxxxxxxxxxxx> wrote:
John Smith <jsm...@xxxxxxxxxxxxxxxx> wrote:
We are a single server network with Exchange server running on the
same box. Is it a recless move to place this server inside the network
rather than the DMZ?

Yes.

cu
59cobalt
--
"If a software developer ever believes a rootkit is a necessary part of
their architecture they should go back and re-architect their solution."
--Mark Russinovich

To add to that.. You need a domain controller in order to run exchange
so you have done one of 2 things either you are running SBS and you
have installed exchange on it or you are running 2003 server which you
have promoted to a domain controller and you installed exchange on it.
Either way installing exchange on domain controller is not a
recommended configuration according to microsoft.

Check out this link it has several other links as to why Microsoft
says it is a no no.

http://blogs.brnets.com/michael/archive/2005/01/24/319.aspx

Never put a domain controller or a exchange server directly on public
name space without using NAT and access lists to control what ports
will be allowed open unless the Exchange server is a Front end
relaying info to a backend cluster. Even then it is recommended to
have a router with some kind of access list to protect it with.

.



Relevant Pages

  • Connecting to OWA from internet
    ... I have a Windows 2000 server that is my domain controller and a 2003 server ... that I just installed Exchange 2003 on. ...
    (microsoft.public.exchange.connectivity)
  • New Exchange 2000 server not in system manager
    ... I have an established server that is a domain controller with exchange 2000 ... I installed exchange 2000 on a second domain controller ...
    (microsoft.public.exchange2000.setup.installation)
  • moving exchange to a new server
    ... We currently have exchange 2000 installed on server 2000. ... exchange is on is the primary domain controller, there is another DC on the ... We have installed exchange 2000 on a different server, ...
    (microsoft.public.exchange2000.setup.installation)
  • Re: Client performance problem windows 2003 server...
    ... >Subject: Re: Client performance problem windows 2003 server... ... >Deploying Active Directory for Branch Office Environments ... >results from not having a domain controller in a particular site. ... incorrectly applied site coverage will be bad for clients ...
    (microsoft.public.windows.server.networking)
  • Re: Client performance problem windows 2003 server...
    ... Testing server: Verkstadsgatan\VERKTYG ... Deploying Active Directory for Branch Office Environments ... results from not having a domain controller in a particular site. ... incorrectly applied site coverage will be bad for clients ...
    (microsoft.public.windows.server.networking)