Pix 515 Config For Exchange 2k3 Front-end in DMZ 1

[morijona]

Hi all,
I'm planning to build a DMZ with a PIX 515 and i would like to know wich ports my exchange Server'll need to work correctly.
I'll have a back-end server with the IP 10.0.0.5 (internal) and my Front-end'll have 207.61.4.82
My front Srv will be for Outlook Web Access and for the RPC over HTTP.
My back-end server will be my SMTP server and I would like to send my mail by NAT
What i think it's that i'll have to open the : 443 ( HTTPS) , 995 (POP3 ssL)Inbound and outbound to my front-end
but for the 25 (SMTP) does i need to foward it ?
Do i need to open some port for the Back-end front-end communication?
And for the RPC over HTTP, Wich port i'll need to do this?

Thanks in advanced

Jonathan Morin

 

[baddos]

Why setup your backend server to do the smtp?

 

[j1mbob]

This should help...

http://www.microsoft.com/technet/prodtechnol/exchange/2003/library/febetop.mspx

The ports were easy for me, it was figuring out how to get the Pix to work that was tricky. Let me know if you have resolved it yet or where you stand.

 

[morijona]

thanks this white paper is what i need thanks