Here's the lay out.
We have a firewall capable of the three legged DMZ design. The mail server we are going with (icewarp) has allot of services that need to be public accessible. Such as; active sync, syncML, webmail, and of course your normal POP3, SMTP, IMAP. To add to the headache, we need the server to be a domain member and backup to a network drive.
The Options:
1) Put the mail server in the DMZ and deal with the mapping of required ports to the required hosts on the internal network.
2) Put the mail server on the internal network and use a second server in the DMZ to forward emails to port 25 and take the risk of forwarding requests for webmail, active sync, syncml, pop3 and imap into the internal network.
3) Just put the mail server in the internal network and take the risks of forwarding all the required ports.
What would you do? Opinions? Am I missing something?
