RE: Protecting an Exchange server?

["Depp, Dennis M." <deppdm () ornl gov>]

Yes this is possible.  You configure your MX records to point to the
email appliance.  The email appliance must be smart enough to forward
the mail to your Exchange server.  For out going mail, you configure
Exchange to use your email appliance as a smart host.  We are doing
something similar, but instead of an email appliace, we are using PMDF
server running on Unix.  The PMDF server also does virus protection and
spam blocking.

Denny 

-----Original Message-----
From: Mark G. Spencer [mailto:mspencer () evidentdata com] 
Sent: Thursday, May 13, 2004 1:52 PM
To: security-basics () securityfocus com
Subject: Protecting an Exchange server?

Hello,

I'm wondering if there is any way to locate an Exchange server on my
internal network and place some kind of email appliance on our DMZ to
actually send and receive email to the world and to the Exchange server
on my internal network?

Basically, I don't want my Exchange server to be accessible to the world
in any way.

So ..

Internet -> My Email Appliance -> Firewall -> Exchange Server

I envision setting up a dedicated route in the firewall between the
email appliance out on the Internet and my Exchange server behind the
firewall on my local network?

Are there any email appliances that can work with Exchange in this way?
It's my (limited) understanding that Exchange server can't "pop" to
another email server to pull each Exchange users email, so I'm not sure
exactly how or if my plan could be put into action.

Thanks,

Mark





------------------------------------------------------------------------
---
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545
off any course! All of our class sizes are guaranteed to be 10 students
or less to facilitate one-on-one interaction with one of our expert
instructors. 
Attend a course taught by an expert instructor with years of
in-the-field pen testing experience in our state of the art hacking lab.
Master the skills of an Ethical Hacker to better assess the security of
your organization. 
Visit us at: 
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
------------------------------------------------------------------------
----




---------------------------------------------------------------------------
Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off
any course! All of our class sizes are guaranteed to be 10 students or less
to facilitate one-on-one interaction with one of our expert instructors.
Attend a course taught by an expert instructor with years of in-the-field
pen testing experience in our state of the art hacking lab. Master the skills
of an Ethical Hacker to better assess the security of your organization.
Visit us at:
http://www.infosecinstitute.com/courses/ethical_hacking_training.html
----------------------------------------------------------------------------