Depends.

Basically if you want to just use regular client-side rules then no, an Exchange server is not necessary.

However if you want server-side rules to run, then yes, you need one.