Exchange Front-End and Back-End with DMZ?

|

How to Configure the RPC Proxy Server to Use Specified Ports for RPC over HTTP

You'll need more than TCP443 (SSL/HTTPS) available from your DMZ to your Back-end Server. You'll need (by default) the RPC ports open too (6001-6004)