Obviously when exchange is behind ISA, ports 25 and 110 and 80 are in an open state as OWA necessitates that in addition to the requirement of the Internet Mail Service in exchange itself. With these ports open, one could be subject to relaying or spamming or some other security risk. Any ideas on how to deal with this effectively regards don