This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problems with owa/exchange 2007

Hello,

we have problems with connecting to our Exchange Server 2007 per OWA.

Earlier we had a reverse proxy with squid. All works fine. Now we tried to get it working with WebApplicationFirewall.
Our IPhones works without problems with acive-sync.
The problem is connecting from external with a browser to owa. I configured all and now if i try to connect to https://our.domain.de/owa the browser try to connect but i see, that the browser then try to connect to our internal ip from the exchange server?!
The settings in exchange for external domain is correct. But why gives the host (don´t know Astaro or Exchange) the internal ip back to the client?

Example:
--- https://our.domain.com/owa
the browser searches for a while and then get back not found. The address field shows:
--- https://10.172.70.10/owa/auth/logon.aspx?url=https://10.172.70.10/owa/&reason=0

Any suggestions?

Thanks

hwk06

This thread was automatically locked due to age.

0 Longman over 12 years ago

Can you post screen shots of your virtual web server, real web server and firewall profile?
Cancel
Vote Up 0 Vote Down

Cancel
0 BjoernStoehr over 12 years ago in reply to Longman

Hi Longman,

here are the screenshots...

Thank you...

hwk06
- virtual.JPG
- View
- Hide
Cancel
Vote Up 0 Vote Down

Cancel
0 Hallowach2 over 12 years ago

Have you tried to use https for the internal webserver?

Regards
Manfred
Cancel
Vote Up 0 Vote Down

Cancel
0 Longman over 12 years ago in reply to Hallowach2

The real web server should be using SSL and Port 443.
Cancel
Vote Up 0 Vote Down

Cancel
0 BjoernStoehr over 12 years ago in reply to Longman

Hey all

thank you.
Now it looks a little better. After changing the port to ssl, what i´ve done already for testing, nothing has happened.
Now i found a firewall rule which was responsible for that. Now with ssl port and the firewall rule changed it works.........BUT

it won´t work with Internet Explorer. Firefox, Opera, Safari no problem. In Internet Explorer no message appears. (The website could not be shown)

Hmmm?

hwk06
Cancel
Vote Up 0 Vote Down

Cancel
0 Longman over 12 years ago in reply to BjoernStoehr

Do you get the same results from any external computer using internet explorer?
Cancel
Vote Up 0 Vote Down

Cancel
0 BjoernStoehr over 12 years ago in reply to Longman

Hi Longman,

yes. Tried with several IEs (8 and 9).

With IE8 i got nothing back. Site not reachable. With IE9 i got back the Certificate Warning. That´s ok but when i click at "Continue loading this site (not recommended)" nothing happens. The site remains at the Certificate Warning.
I´ve searched the logs but found nothing special.

Thanks...

hwk06
Cancel
Vote Up 0 Vote Down

Cancel
0 Longman over 12 years ago

Turn off cookie signing on the firewall profile - astaro has an article which has it off. If that doesn't change the issue try a dnat rule to verify you can connect that way.
Cancel
Vote Up 0 Vote Down

Cancel
0 BjoernStoehr over 12 years ago in reply to Longman

Hi Longman,

turned off cookie signing. The problem is the same. Activated a dnat rule and this works with IE.

Hmm, don´t know why. Unfortunately the logs gives no answer...

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 Longman over 12 years ago

You mentioned a certificate warning when using IE9 which indicates some issue with the cert. I am not an expert in that area. The one I am using I got from digicert which is working fine. Maybe you can expound a bit on the cert you are using and maybe another user may have some ideas. I receive no cert warnings when using owa publicly thru waf to an exchange 2007 server.
Cancel
Vote Up 0 Vote Down

Cancel