Should I have a separated edge transport Server or can I activate Antispam
Services in a single E2K7 server environment (doing Hub, Client and mailbox
role) as a "simple" exchange2007 organization.

Thanks in advance.

Re: Single Exchange 2007 Server - Antispam by mpriem

mpriem
Wed Feb 07 08:31:53 CST 2007

Hi there,

You can install the antispam agents using the ./install-
AntispamAgents.ps1 script
Be aware that having an hub transport at your perimeter network needs
additional configuration.
You need to add your hub transport ip to the InternalSMTPServers
parameter using the Set-TransportConfig cmdlet.
You will also need to check your inbound security to disallow windows/
tls/basic authentication (tls could be needed though) so that one can
not poll your AD for valid useraccounts.
Also DSN's is something you should take a look at. Also to prevent
directory attacks. You can also set them using the Set-TransportConfig
cmdlet.

Regards,

Mark



Re: Single Exchange 2007 Server - Antispam by mpriem

mpriem
Wed Feb 07 08:39:36 CST 2007

Just a addition.
The edge transport server is specifically tailored to be used as the
permiter relay. It is installed as an standalone server , so it can be
put in a DMZ without having to open ports to domain controllers or
hosting AD in the DMZ. It uses a ADAM implementation where userinfo is
stored, which is replicated one-way by an internal Hub transport
server. It also contains several transport agents which rewrite
message content, do antivirus, antispam etc. The antispam agents can
be installed on a hubtransport using the script I mentioned earlier.

For a simple Exchange setup you can safely go with the single hub
transport server facing the internet, but be aware of the config I
mentioned. (inbound security, dsn's, maybe some content rewriting etc)