Exchange 2007, postini and mobile devices getting mail

OK, I'm not quite sure where to post this since it covers a few topics, but at the core, its a mail question, so here goes!
THE CORE QUESTION:
How do I restrict port 25 to only receiving mail from our spam filtering service (postini) without making the iphones unable to get mail?

THE DETAILS:
We've have exchange 2007. we've recently setup postini (for those not familiar: a spam filltering service. we change out MX records to hit their site, filter the spam, then the mail gets sent to out to our IP from them. We also send out mail out through them from our exchange box)
Part of the setup requires us to only accept port 25 connections from so that we can setup a "secure relay" on our server for when the have to reinject a message.

We have users that have iphones that connect to our IP or mail.domain.com to grab mail. only allowing port 25 connections from postini makes the phones unable to connect. Does anyone know a way around this? can exchange receive on port 25 and another port at the same time? maybe there is a firewall rule i'm not thinking of?

I had to open the rule for a while, and got hit hard with spam, probobly someone trying to relay off our server. queues were filled up big time.

I know this is a lot, please ask for any clarification needed. thanks in advance.
-JTAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

tmeunierCommented:
Yes.  Use Exchange Activesync for the iPhones, and then they'll use port 443 if you use SSL, or port 80 if you don't.  There's no reason now for iPhones to use POP3 or IMAP4.  Then you can restrict port 25 to Postini and you're all set.  The iPhones will connect using the same port 80/443 that you've opened for Outlook Web Access, Outlook over RPC/HTTP(s), and Entourage.

-tom
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
-JTAuthor Commented:
OK, thanks for the reply. I actually looked at the firewall logs and the IP's from the iphones do indeed appear to be using port 80. Thanks!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.