[ExchangeList] Re: moving to e2k7 in multiple domain with a firewall in the middle

  • From: "Michael B. Smith" <michael@xxxxxxxxxxxxxxxxxxxxxxxx>
  • To: <exchangelist@xxxxxxxxxxxxx>
  • Date: Sun, 4 May 2008 17:26:54 -0400

How did you have it working under Exchange Server 2003?

 

Regards,

 

Michael B. Smith

MCSE/Exchange MVP

http://TheEssentialExchange.com

 

From: exchangelist-bounce@xxxxxxxxxxxxx 
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Praveen Ramaswamy
Sent: Sunday, May 04, 2008 9:00 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] moving to e2k7 in multiple domain with a firewall in 
the middle 

 

http://www.msexchange.org 
-------------------------------------------------------


Hi,

 

Just to brief on my setup: 

 

We have AD forest corp.in and under that abc.corp.in and xyz.corp.in , we have 
exchange 2003 sp2 on windows 2003 sp2 currently, we are in process to move to 
exchange 2007. So we doing the testing.

 

I have installed first CAS/HT/MB exchange 2007 server in abc.corp.in domain. 
There is no issue. All are exchange 2007 sp2 on windows 2003 64 bit.

Now I installed first CAS server in xyz.corp.in domain, now problem is this 
server is trying to connect to exchange server in abc domain to learn the 
topology, but we have a firewall between these two domains, i.e between abc and 
xyz.

 

Now my management do not want to have any connectivity between these two 
domains, but we have to utilize gateway servers in abc domain for all our 
external mails. The reason why we don’t want full connectivity is abc domain is 
owned by service provider and we currently work on decentralized administrative 
model. Not sure what is the connectivity between exchange 2003 servers in these 
two domains, I am checking on this, this might give me some idea as well. 

So given this scenario is it possible to open only SMTP port between HT of xyz 
domain to HT or edge of abc domain without opening any other ports for the 
other exchange server communication .

 

Hope this info is sufficient , can anyone please advice on this

 

Regards

Praveen R

 

  _____  

Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try 
<http://us.rd.yahoo.com/evt=51733/*http:/mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ%20>
  it now. ------------------------------------------------------- List 
Archives: http://www.freelists.org/archives/exchangelist/ MSExchange 
Newsletter: http://www.msexchange.org/pages/newsletter.asp MSExchange Articles 
and Tutorials: http://www.msexchange.org/articles_tutorials/ MSExchange Blogs: 
http://blogs.msexchange.org/ 
------------------------------------------------------- Visit TechGenix.com for 
more information about our other sites: http://www.techgenix.com 
------------------------------------------------------- To unsubscribe visit 
http://www.msexchange.org/pages/exchangelist.asp Report abuse to 
listadmin@xxxxxxxxxxxxxx 

Other related posts: