Re: New NW Config for a company - OWA setup

From: Ziguana (Ziguana_at_discussions.microsoft.com)
Date: 12/14/04 

Date: Tue, 14 Dec 2004 15:05:04 -0800

Forgive me for potentially being a little 'unknowledgeable here' but my
current firewall config is pretty tight, I only let certain outbound ports
open (80 / 443 / 25) and any incoming ports are tied to only except from a
specific IP address.

If I open 443/80/4125 inbound to except from anyone or any IP am I not
potentially opening my network up to malicious attacks?

"David Copeland [MSFT]" wrote:

> M,
>
> OWA needs TCP Port 443 (TCP Port 80 if you don't want users to have to
> remember to type in https:// so that it can automatically redirect)
> RWW needs TCP Port 443, TCP Port 4125
> RAS? If you are referring to be able to VPN in.. For PPTP you will need TCP
> Port 1723 and IP Protocol 47 (GRE)
>
> Check out Appendix C of the Getting started Guide for more info
>
> http://www.microsoft.com/technet/prodtechnol/sbs/2003/plan/gsg/sbsgsgab.mspx
>
>
> --
>
> Hope that helps,
> David Copeland
> Microsoft Small Business Server Support
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> Newsgroups:
> SBS v4.x : microsoft.public.backoffice.smallbiz
> SBS 2000: microsoft.public.backoffice.smallbiz2000
> SBS 2003: microsoft.public.windows.server.sbs
>
>
> "Ziguana" <Ziguana@discussions.microsoft.com> wrote in message
> news:A3079679-7D37-41E4-B873-4FC5EC50A4E5@microsoft.com...
> >I have Exchange 2003 on SBS 2003 in a 192.168.1.x network behind a software
> > firewall (not ISA) which goes into a 10.0.0.1 DMZ network which has a
> > webserver with an address of 10.0.0.2 which is then behind a hardware
> > firewall with an address of 10.0.0.3 and finally out onto the internet
> > with a
> > static address.
> >
> > I need to open up OWA and RWW/RAS into the Exchange 2003 box, can someone
> > point me in the right direction to do this, what ports I need to open and
> > what I need to do to make it secure.
> >
> > Thanks in advance.
> >
> > M
>
>
>