OWA does need to be installed on a member server. The member server must be in the same domain as Exchange or a trusted domain. OWA 5.5 requires IIS3 with ASP installed or IIS4 or IIS5. You do not need to install any other Exchange Services, onlythe OWA components. As for ports through the firewall, you need 135 for RPC, and then unfortunately the other two ports (one for connection to the IS and the other the DS) are dynamically assigned by the Exchange Server at bootup. This ports change, unless they are fixed in the registery on the Exchange Server (hosting mailboxes). The KB article that outlines this is: Q259240
http://support.microsoft.com/support/kb/articles/Q259/2/40.ASP