Quantcast
Channel: Small Business Server forum
Viewing all articles
Browse latest Browse all 8539

SBS 2011 Best Practice for connecting Exchange to the Internet

$
0
0

Hi,

I am looking for a bit of advice or maybe just reassurance.

I've been running with SBS 2003 and now I am on SBS 2011 standard but I am not completely convinced I have the best setup regarding email.

I have always been worried about connecting Exchange directly to the internet, so I've always had another email server in front of it, on a separate box, which forwards email on to the Exchange server running on my SBS 2011 box.

The thinking behind that was that if the other mail server running on a Windows XP box got compromised it wasn't the end of the world as it could be wiped and re-installed fairly easily but if my SBS box got compromised then that would be a bigger issue.

This other server is VPOP3 and my hardware firewall passes SMTP connections on to this box, I also have a backup MX record that stores email in a POP3 mailbox with my ISP which VPOP3 then also downloads via POP3 and forwards to my Exchange server. It all seems to work very well (in my opinion).
However, this setup now seems rather complicated and I am looking to improve things by getting rid of the VPOP3 server and just have my firewall direct port 25 to the Exchange server (SBS 2011).
Is this the best practice though ? I am still nervous about having the Exchange server exposed directly to the internet, although it would only be port 25.

I am also looking at using one of the many hosted anti-spam solutions, they seem to be worth wile as they offer me SMTP redundancy as well as being able to only open my Exchange server to their IP addresses only.

Any advice gratefully received.
Thanks
BigJoe9090

Viewing all articles
Browse latest Browse all 8539

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>