DMZ Front End

[micon55]

Hi,
I am trying to set up a front-end server within a DMZ. I have 2 back-end servers working as mail stores and only want to use the front-end for web access.

Can anyone tell me which ports need to be open between my internal network and the DMZ please.

I set the config up on the same LAN and it all worked OK, but as soon as I moved the FE in the DMZ, I started to receive errors.

Thanks in advance.
Mike

PS. The FE server is a member of the domain.

 

[brontosaurus]

I don't know what other services you're providing, but here's some ports to consider:

25 smtp
80 http
102 mta
110 pop3
135 rpc client/server communication
143 imap4
389 ldap
443 ssl (http)
465 ssl (smtp)

 

[brontosaurus]

oh, also:

3268 and 3269 for GC communication

 

[micon55]

Many Thanks for that. I'll give them a try. I keep reading about using port 1025 as a static arrangement. Is this the best idea?

Thanks again.
Mike

 

[tekistry]

I have just done this myself.
Take care opening port 135 (rpc) from your DMZ.


---------------------------------------
save a life - visit:

http://www.thehungersite.com