Exchange 2016 - does it make sense to have an intermediate relay on *nix?

Question

Mail server

Colleagues, I asked myself, I haven’t worked with Exchange since the 2010 version, now we are planning to deploy 2016. Previously, due to the scarcity of antispam settings in 2010, I always set Postfix as the receiving server, all the antispam functionality was already configured on it, and after it was Exchange. How are things now with the 2016 version, does it make sense to install an intermediate relay, or can you expose Exchange with your bare ass (or not already bare?)? What is the best practice now?

Answer 1

I recommend to revive your practice with Postfix. This is very good for your Exchange.

Answer 2

Exchange 2016 filters spam relatively well, but then it doesn’t know how to clean mail from viruses. You need to install a separate commercial antivirus that will clean port 25.
I just abandoned the regular spam filter in the direction of Proxmox Mail Gateway. It beats spam well and adjusts well and works well for viruses.
Here is an example: https://www.k7d.ru/it/proxmox-mail-gateway-ustanov...

Answer 3

it’s worth 2016, opening it naked to the gun is not practical at all. I
encountered such nonsense that the combination of roles does not work correctly - the server does not always check mailboxes and edge via sfp, spam check exceptions are
clumsily configured (more than 100 domains for exceptions have accumulated)
As a result, now I put a postfix, because the simpler - the better.
Exch is already cleaning up what has flown through the postfix (checks attachments for viruses)