Linux

Ask something
Discussion Locked

OWA on the DMZ--Can't Authenticate!

0 helpful
3 replies

by michael.davis

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have implemented an Outlook Web Access Server on the DMZ (third firewall nic)of my network. I opened three netbios ports (137udp, 138udp, 139tcp) on my raptor6.0 firewall (Unix)to the PDC as well as three ports for exchange (exchangeDS, exchangeIS, and endpoint mapper port) and set up secure channels to the Exchange 5.5 Mail Server as well as the PDC. I still can't get authentication to work through OWA. The OWA is set up on NT4.0 Server on a different subnet using an LMhosts file for WINS resolution to the PDC and Exchange boxes. When the OWA Server tries to authenticate a user, I see traffic (at the firewall)only broadcast the request---but get no responses from the PDC??? Any Suggestions?

3 replies

by some guy in seattle

This is actually a problem still with the OWA setup. Try opening port 135 on the firewall to allow authentication traffic to pass. The web server also uses two random ports >1023 for return service to the OWA server. Instead of opening all ports >1023, look at MS documents Q148732 (MS Exchange 4.x, 5.x) or Q270836 (Exchange 2000) to give you the procedure to set up two static ports on the Exchange server via the Registry (this way you can choose the ports and only open those up from the Exchange server to the OWA server).

Hope that helps,

by michael.davis

I had all of this information.
I found that since we had 2 Exchange servers, we had to build a second secure tunnel in our firewall to the second exchange server from the DMZ.

Thanks for your assistance

This discussion is closed to new replies.