Configure Exchange for the Internet... with only one server...

vi edit

Elite Member
Super Moderator
Oct 28, 1999
62,484
8,345
126
I've got exchange running on one machine. I know of the security risks, but it was something that I was willing to accept in "exchange" for the features and convenience that it provides.

I have my exchange server sitting behind my firewall. Server is setup as PDC, and has active directory installed. It's running DNS and Wins as well. I've got a public IP on the firewall side of things, that passes through the the firewall via one-to-one nat to a a private IP on the inside. Firewall has specific ports needed by exchange opened up only for that IP address.

Internal machines use private IP address of exchange box for DNS server, and log onto the domain of the exchange box. Outlook uses the name of the exchange box to set up user accounts. External sources can use IMAP or Pop3 for remote access, or they can use OWA, which is also running on the server.

I run Trend Micro's Scanmail for Exchange to scan inbound and outbound emails for viruses.

It's worked very well for us thus far. Like I said, I was willing to sacrafice some security for the benefits of convenience, and the fact that I didn't have to buy double hardware, double software, and double the licenses.
 

GeSuN

Senior member
Feb 4, 2002
317
0
0
Internal machines use private IP address of exchange box for DNS server, and log onto the domain of the exchange box. Outlook uses the name of the exchange box to set up user accounts. External sources can use IMAP or Pop3 for remote access, or they can use OWA, which is also running on the server.

Ok so does that mean that I can only forward IMAP and POP3 ports or do I also have to forward SMTP port??

Also, what are your DNS settings and Exchange settings... I mean, is your MX option in DNS pointing to your server or your ISP server... what about when you do nslookup?? What does it looks like??

 

GeSuN

Senior member
Feb 4, 2002
317
0
0
Bump, anyone has a good How-to to setup Exchange for the Internet with only one server???