Hi,
Your mail server should not reside in the dmz, only the smpt redirector, this does not actually have to be exchange! Servers hosted by the DMZ should not be a member of your domain either, either a seperate domain (no trusts) or workgroups.
jrb
MCSE, MCSA, MCP