Hi,
On my Exchange 2000 for OWA, I have ports: 25,80,110,443 open. My Exchange server is not my primary DNS so I don't need dns open to the server. My Authentication is done on a secure socket through port 443. I would recommend you test this out and close as many of those ports as possible...