Outlook Web Access (OWA) on Apache in DMZ ;) - Network Administrator Knowledgebase

Network Administrator Knowledgebase

Nov 29 2008   4:54PM GMT

Outlook Web Access (OWA) on Apache in DMZ ;)



Posted by: Michael Khanin
Outlook Web Access, Exchange, RPC over HTTP/S, Outlook Web Access (OWA) on Apache, OWA on Apache

Using Apache 2 with Outlook Web Access (OWA) it’s very easy. This solution is even working when Apache installed on Windows XP and this solution can save a lot of money :), not necessary to buy Windows Server, additional Exchange Server licence or ISA Server. First, we need to enable some useful modules:

proxy
headers

Now, we need to edit / create a VirtualHost section (or use Include conf/extra/httpd-vhosts. conf, remember to make following changes inside httpd-vhosts. conf ):

<VirtualHost 1.2.3.4:80>
ServerName exmail.admininfo.ca
DocumentRoot /var/www/html/exchange
RedirectMatch ^/(index.html?)$ https://exmail.admininfo.ca/exchange/
RedirectMatch ^/exchange$ https://exmail.admininfo.ca/exchange/
</VirtualHost>

<VirtualHost 1.2.3.4:443>
# This secures the server from being used as a third party
# proxy server
ProxyRequests Off

# Allows the proxying of a SSL connection
SSLProxyEngine On
ProxyVia On

DocumentRoot /home/user/mail_proxy/html/
RequestHeader set Front-End-Https “On”

ServerName mail

# Set up SSL to work with this host
SSLEngine On
SSLCertificateFile /etc/apache/webmail-proxy/server.crt
SSLCertificateKeyFile /etc/apache/webmail-proxy/server.key

SSLProxyMachineCertificateFile /etc/apache/webmail-proxy/certnew.cer

ProxyPass /exchange/ https://mail-internal/exchange/
ProxyPassReverse /exchange/ https://mail-internal/exchange/

ProxyPass /exchweb/ https://mail-internal/exchweb/
ProxyPassReverse /exchweb/ https://mail-internal/exchweb/

ProxyPass /public/ https://mail-internal/public/
ProxyPassReverse /public/ https://mail-internal/public/

ProxyPreserveHost On
</VirtualHost>

NOTE: If you are using Apache on Windows, remember to make changes accordingly.

Comment on this Post


You must be logged-in to post a comment. Log-in/Register