Re: OT Slightly: Exchange 2000
- From: "Stephen Herrera" <sherrera@xxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 25 Sep 2003 10:05:36 -0700
Thanks for the info. I am pretty new to Exchange and although I am going to
take a class the pressure to get it implemented is mounting. I have gone to
the Exchange site and done the prep work for the forest and domain based off
of one of their articles. I am planning on implementing in 3 stages which is
move from MSMail to MSExhange internally, hosting our own SMTP, then putting
the SMTP gateway in the DMZ. Do you know of any good articles on setting up
Exchange? I am learning a lot with my test setups but would like to be a
little more sure when I do the production setup. Thanks in advance.
-----Original Message-----
From: Thor [mailto:thor@xxxxxxxxxxxxxxx]
Sent: Wednesday, September 24, 2003 12:50 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: OT Slightly: Exchange 2000
http://www.ISAserver.org
Hi Stephena- I have this exact setup... The DMZ is what you want to make
attackers get through in order to GET to Active Directory... Not only is
EX2k a nice price to get from a DMZ breech, the ports you would have to open
up (assuming it contains mailboxes) to allow client access from the LAN
would be far too dangerous.
I highly recommend a DMZ SMTP-Gateway that will accept SMTP from the
external ISA box, scan for viruses and strip attachments, that then
smart-hosts the mail to the perimeter ISA that publishes to the internal
EX2k box. Something like this-
Net -> Ext ISABox -> SMTP Server Publishing to DMZ SMTP Gateway -> DMZ SMTP
Gateway Actions -> Smart Host delivery acto perimeter ISA IP Address ->
Server Published to Internal EX2k.
With SMTP filtering on the ISA boxes.
My .02 anyway...
T
----- Original Message -----
From: "Stephen Herrera" <sherrera@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, September 24, 2003 12:37 PM
Subject: [isalist] OT Slightly: Exchange 2000
> http://www.ISAserver.org
>
>
> I am preparing to deploy and Exchange 2000 server. I have a back to back
ISA
> server environment. I am doing some test installs of Exchange before I put
> the production server in place. I am curious as to where is the preferred
> place to put the server, in the DMZ or on the LAN. I was thinking the DMZ
> until I saw that you can see all of your Active Directory through
exchange.
> Any input is appreciated.
>
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
thor@xxxxxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
>
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: sherr
era@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
