How does one "open" ports for a certain service?

[gman10]

Hello all-

I was thinking about setting up my Exchange server in my network between the DMZ and the internal network in order for OWA to function correctly. How do I actually open up ports 135, 137, 138, and 139 (among others) However, I know that opening these ports limits the effectiveness of putting an OWA server in the DMZ. If attackers compromise the OWA server, they'll have many ports going into the private network to work with but might try it as a test but don't know how to actually open these ports?? Anybody have a clue?

thx to all here on this forum..

gman

 

[DFavel]

Have you thought about maybe not sticking your Exchange server in the DMZ and instead setting up an IIS server in the DMZ with Virtual directory pointing to the Exchange server where it is safley behind the firewall?

 

[gman10]

Yes,

That was a valid major alternative.. I'm really just interested in finding the right way to open those ports.. but I agree, sticking IIS in the DMZ then pointing a virtual dir to Exchange IS definately more airtight of a solution...

thx
gman