Hello, We have one Exchange 2003 in our network. It is used as email store only. We still rely on POP3 from our ISP to send/receive email. Now, we want to have our exchange to do the send and receive directly and stop the services from our ISP and we want to let our users to access their mail box through OWA. I want to implement a FE 2003 server in the following way : Firewall ---- DMZ (FE) ------- Lan (BE) I would like to use FE just for OWA and the BE will be used for send and receive email My plan : 1) Install ScanMail on BE 2) Forward port 80 to FE from router 3) Forward port 25 to BE from router Is it all I need to do ? Will it work ? Is it OK on security concern ? I know that it can be more secure if I can have an ISA server in front of it but we won't be able to have it. Is there any better way to make it more secure ? Please advise . Regards, Eddie
Hi, It is better to install the fe server on the intranet and only open port 443 from the internet to the fe server (you need to install a certificate for this to work). Remember also to change the MX record to point to the external interface of your router. Leif skrev i meddelelsen news:1191348898.675545.154210@k79g2000hse.googlegroups.com... > Hello, > > We have one Exchange 2003 in our network. It is used as email store > only. We still rely on POP3 from our ISP to send/receive email. > > Now, we want to have our exchange to do the send and receive directly > and stop the services from our ISP and we want to let our users to > access their mail box through OWA. > > I want to implement a FE 2003 server in the following way : > > Firewall ---- DMZ (FE) ------- Lan (BE) > > I would like to use FE just for OWA and the BE will be used for send > and receive email > > My plan : > > 1) Install ScanMail on BE > > 2) Forward port 80 to FE from router > > 3) Forward port 25 to BE from router > > Is it all I need to do ? Will it work ? Is it OK on security concern ? > > I know that it can be more secure if I can have an ISA server in front > of it but we won't be able to have it. Is there any better way to make > it more secure ? > > Please advise . > > Regards, > Eddie >
