General discussion

Locked

OWA on the DMZ--Can't Authenticate!

By michael.davis@nystew.ang. ·
I have implemented an Outlook Web Access Server on the DMZ (third firewall nic)of my network. I opened three netbios ports (137udp, 138udp, 139tcp) on my raptor6.0 firewall (Unix)to the PDC as well as three ports for exchange (exchangeDS, exchangeIS, and endpoint mapper port) and set up secure channels to the Exchange 5.5 Mail Server as well as the PDC. I still can't get authentication to work through OWA. The OWA is set up on NT4.0 Server on a different subnet using an LMhosts file for WINS resolution to the PDC and Exchange boxes. When the OWA Server tries to authenticate a user, I see traffic (at the firewall)only broadcast the request---but get no responses from the PDC??? Any Suggestions?

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

OWA on the DMZ--Can't Authenticate!

by Some Guy in Seattle In reply to OWA on the DMZ--Can't Aut ...

This is actually a problem still with the OWA setup. Try opening port 135 on the firewall to allow authentication traffic to pass. The web server also uses two random ports >1023 for return service to the OWA server. Instead of opening all ports >1023, look at MS documents Q148732 (MS Exchange 4.x, 5.x) or Q270836 (Exchange 2000) to give you the procedure to set up two static ports on the Exchange server via the Registry (this way you can choose the ports and only open those up from the Exchange server to the OWA server).

Hope that helps,

Collapse -

OWA on the DMZ--Can't Authenticate!

I had all of this information.
I found that since we had 2 Exchange servers, we had to build a second secure tunnel in our firewall to the second exchange server from the DMZ.

Thanks for your assistance

Collapse -

OWA on the DMZ--Can't Authenticate!

This question was closed by the author

Back to Linux Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums