Exchange in DMZ

[raptoid]

I'm currently looking to implement Exchange server. I have a firewall with a DMZ setup which houses my web server. I've read and have been told that it would be advantageous to put the Exchange server in the DMZ, is this true? surely if it is in the DMZ, if it gets attacked it will mean a lot of work to rebuild.

many thanks for your suggestions and thoughts on this one.

 

[MitchCumstein]

I don't see why you would want it in the DMZ, except for OWA which can go there separately.

I've read about the "front-end/back-end model" for some circumstances, so I guess it depends on what you're gonna do:

http://www.microsoft.com/Exchange/techinfo/deployment/2000/E2KFrontBack.asp

http://online.securityfocus.com/infocus/1578

 

[festerrob]

You don't want your server in the DMZ unless your backup and recovery strategy is tested and easy to use. The best way to accomplish this is to have a mail relay agent in the DMZ that knows to forward to the actual server in your Private network space. Winrouter is a good example of a relay mail server.
Regards,
Scot