Firestarter/Exchange Server

HyperRon · 10-27-2003, 12:14 PM

I'm trying to setup a firewall using firestarter. We currently have a windows 2000 domain with 5 workstations, an exchange server, and a web server. I'd like to create a DMZ consisting of the exchange server and a web server. Has anyone tried to connect to an exchange server outside of this type of firewall before? I'm basically looking for advice before I start changing subnets and screwing with our current domain setup.

taggedd · 10-27-2003, 01:04 PM

Typically you will not want your exchange server outside of your firewall. What you do is create your web server in the DMZ and then created a shared directory to the exchange server via OWA.

Worked well for me.

Regards.
Tim.

HyperRon · 10-28-2003, 05:20 AM

Thanks for your response. I ended up putting another NIC in the exchange server to make it visible to the DMZ as well as behind the firewall. I know this isn't the most secure route but, it's a temporary solution.

taggedd · 10-28-2003, 07:04 AM

Why don't you punch a hole just between the two machines. That way the only machine that can access the Exchange server is the web server. That way it's quick and easy, and secure.

Regards.
Tim.

HyperRon · 10-28-2003, 07:42 AM

Exchange uses random ports. It's kinda funky that way. I'm considering editing the registry and making them static but, I'm going to stick with this for a bit to see how it works.