IT Employment

Ask something
Discussion Locked

Configure Win2K through the firewall

0 helpful
5 replies

by debate

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

In this week's column, Mike Mullins addresses how to configure Windows 2000 servers in your DMZ. Have you set up an Exchange server in your DMZ? Did you have any problems allowing domain authentication traffic to and from this server? What problems have you experienced with your clients connecting to this server?

If you'd like to learn more about the Security Solutions TechMail, point to this link and click Security Solutions to see a sample. If you're interested, you can also sign up:
https://www.techrepublic.com/techmails.jhtml?repID=r001

5 replies

by areets

Securing collaboration environments

Place only the e-mail daemon (e-mail forwarder (linux)) in the DMZ, collaboration starts within, so protect firstly, followed by assessment to determine collaboration track plan.

There is more that can be achieved by secured frameworking of the content as to encourage greater collaboration and ease of use.

The firewall can protect both the DMZ and LAN; and offer a secured platform to provide external collaboration.

TSP

by matt.jones

Getting ready to set this up at present. Has Mr. Mullins written anything else? and what's his recommended reading on the subject? Or specific authors?

by delphi

This is a good article. You mention that you must specify the RCP port on the client. You did not mention that you had to make this change on the DC's that the Exchanger servers will contact see Microsoft PSS ID Number: 280132.

This would require changing the RPC port on all DC's or configuring a site for DC's solely for Exchange.

Question: if one were to change the RCP port setting on all DC's so they would use a single port for RPC communication, would this cause any performance problems on the DC's or requesting clients?

by mike mullins

You're right, the RPC ports should be specified across the domain. I should have specified this rather than infer it. As for how many ports. I currently open 2 ports for each exchange server in the system. That will allow the exchange servers to talk to each other and the DCs. As you add exchange sites, increase the port range.

Port ranges are specified like 2000-2019.

Good Luck,
Mike Mullins
Security Solutions

by nakkii

We are currently running an Exchange Server on the inside of the DMZ, and in the DMZ we have set up SMTP Forwarding on IIS. This seams to me to be much more secure.

This discussion is closed to new replies.