Security

Ask something
Discussion Locked

Exchange Server 2000 & My DMZ Setup

0 helpful
1 reply

by raednashat

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi every body ....

I have a DMZ network setup where I need to
keep my Exchange 2000 Server within the
protected segment ( private LAN ) and have
a corresponding SMTP relay server on the DMZ
segment ( Public LAN ) .
Any idea about that ?
I have the following DNS setup :

A Public DNS Server within the DMZ
A Private DNS Server within the Private LAN.

Thanks for every one out there.

1 reply

by rachel_s

Actually, this is highly recommended.

Your SMTP server would protect the internal Mail server from attacks, since it would be the only one the Public would 'see'. Plus in the event there was an attack, most likely Internal e-mail would still function while the SMTP relay was down.

Configuration:
Article ID: Q253193
Article ID: Q293800 - just open the firewall for SMTP traffic to/from this box in the different directions.

Comment on the DNS server in the Private LAN. Any server in the Private LAN is vunerable to the inside where they say 60-80% of attacks occur.

You'll have to evaluate each time whether more servers should go in the DMZ. Risk(high/medium/low), performance, reliability (what if the DMZ goes down???), cost, etc...

Hope this helps! Good Luck!

This discussion is closed to new replies.