The Exchange team just posted a lengthy article about configuring Firewalls to prevent timeouts when using Direct Push, a new and popular way of delivering mail to mobile devices.
Even if you do not use Direct Push, the article is a pretty good primer on web connectivity, Firewall and DoS attacks.
Read it here:
http://msexchangeteam.com/archive/2006/08/17/428703.aspx