Re: Exchange 2003 Front End/Back End Servers & Passwords

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Peter Marshall (texmarshall_at_hotmail.com)
Date: 12/16/04 

Date: Thu, 16 Dec 2004 11:44:32 -0000

> Not sure how as they'll be getting authenticated on your domain. I think
the
> FE server shouldn't be in your DMZ anyway - you'll have to open up a lot
of
> ports between DMZ and LAN in order for the server to communicate. Sort of
> negates the purpose of a DMZ.

The authentication was my concern - might be more sensible to post to an
Active Directory list. The DMZ/LAN link will have to be firewall
controlled, in the same way that we have the Web Server/Db Servers setup.

> You should be using good passwords on your LAN anyway - doesn't matter
that
> it's small and trusted. 8 char. minimum, complex passwords, regular forced
> changes.

True, for small & trusted team, read lazy!

> That said - with a small network, are you sure you even need a FE/BE
config?

Its the security aspects of it I'm worried about - don't want to open up the
email server to the world any more than I have to.

Relevant Pages

  • RE: fedora-list Digest, Vol 6, Issue 266
    ... Re: OT: Setting up a forwarding mail domain in DMZ without ... Re: Sound Problem ... downloaded the yum.conf for fedora from Redhat's website. ... Server: Fedora.us Extras ...
    (Fedora)
  • RE: Webserver on a DMZ still needed?
    ... Certainly your suggestion to have a email server in a DMZ but still have ... having the exchange server on the internal LAN with only the smtp ports ... Talking of the financial cost of setup by the book vs the security cost ...
    (Security-Basics)
  • Re: Man gets nine years for spamming
    ... > I don't think we've ever had web access. ... > connect to an inner server where you logged in and actually did stuff. ... We have 12 DMZ interfaces. ... the DMZs and in between the Internet routers and the first ...
    (alt.computer.security)
  • RE: [fw-wiz] Backup exec agent in dmz
    ... named.conf file and the zonefiles off the the NT box in the DMZ. ... on the Apache server, ... backup tape library in this DMZ and backup all your servers to the new DMZ. ... what do you really need to back up on the DNS and web servers? ...
    (Firewall-Wizards)
  • Re: OWA
    ... Here is his comment about form based authentication over SSL: ... be the use of FBA and ISA where the authentication happens in the DMZ ... about front end and backend server and here is his comment about ... are passed to the Exchange server by a proxy. ...
    (microsoft.public.exchange.admin)