Re: Exchange Server and External Access

["Moti Levy" <moti () flncs com>]

well ,exchange support front end server concept :
http://www.securityfocus.com/infocus/1572
http://www.securityfocus.com/infocus/1578


Personally I would recommend you put a FreeBSD box running apache and
SquirrelMail  ( or any other imap capable web client ) .
allow only that servers ip to access the exchange via imap , only problem
with that is that your users will only have mail functions and not the other
exchange features like calendaring and such .


Moti

----- Original Message ----- 
From: "Cherian M. Palayoor" <cpalayoor () cwalkergroup com>
To: <security-basics () securityfocus com>
Sent: Friday, August 22, 2003 1:25 PM
Subject: Exchange Server and External Access


Hi,

We presently use the Std edition of Exchange 2000 as a mail server for our
internal users, behind the Firewall.

However we would like to grant mailbox access to external users outside the
Firewall.

What would be the most secure and efficient method of accomplishing this.

One stream of thought that I have been entertaining is having a separate
Exchange/Mail  Server on the DMZ.

Now this solution would result in having to maintain 2 separate mailboxes
for
internal and external users. This creates problems for users who would
access
their emails from both inside and outside the office.

How can I workaround this problem.

Thanks in advance for any suggestions.

Regards

CP


 Scanned by Webshield E250



---------------------------------------------------------------------------
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------