Re: Exhange 5.5 Behind Firewall?
From: Robert Moir (maranbat@bitey.force9.co.uk)
Date: 08/08/02
- Next message: Chuck Stevens: "Re: *Completely* silent IE Patch distributions"
- Previous message: Steve: "Exhange 5.5 Behind Firewall?"
- In reply to: Steve: "Exhange 5.5 Behind Firewall?"
- Next in thread: Gregory W. Smith: "Re: Exhange 5.5 Behind Firewall?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Robert Moir" <maranbat@bitey.force9.co.uk> Date: Thu, 8 Aug 2002 20:06:07 +0100
"Steve" <howard_steve@medicalert.org> wrote in message
news:1ed501c23f0d$9398bae0$35ef2ecf@TKMSFTNGXA11...
> We just recently moved our Exhcnage Server from our
> internal LAN to our DMZ for protection.
>
> But In the process, I have had to make a lot of changes
> and open ports just to allow the Exchange server to work.
> Backup went from 15 minutes to several hours.
>
> Was it worth it? The jury is still out.
>
> I could have left it where it was, with only 3 ports
> open ( 80,443, and 25) and watch it closely, or the
> current plan on the DMZ but with HTTP, HTTPS, SMTP,
> NETBIOS, RPC, Static DS and ISA ports mapped, and the list
> goes on.
>
> And, when I move to Exchange 2000, I will need to open
> more for AD Replication.
>
> How are most of you maintaining your email servers, on
> the LAN, or on a DMZ?
On the lan. If you have to open all those ports to put something on the
other side of your firewall it kinda makes you wonder why you bothered
having the firewall installed to begin with. You can publish HTTP pages
behind a proxy, use a SMTP gateway, etc, theres no reason to expose your
network in this way.
- Next message: Chuck Stevens: "Re: *Completely* silent IE Patch distributions"
- Previous message: Steve: "Exhange 5.5 Behind Firewall?"
- In reply to: Steve: "Exhange 5.5 Behind Firewall?"
- Next in thread: Gregory W. Smith: "Re: Exhange 5.5 Behind Firewall?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
