Best practice is internal to the protected network if you define it that
way. It pretty much just is intended to be on the same network as your
Active Directory and never on the external or DMZ networks (again if you
define it that way or have that type of architecture).
Why do you ask? <G>
> Where should an exchange 2003 Server sit in a network? Internal,
> external, or DMZ?