Network Administrator Knowledgebase:

RPC over HTTP/S

Nov 29 2008   4:54PM GMT

Outlook Web Access (OWA) on Apache in DMZ ;)



Posted by: Michael Khanin
Outlook Web Access, Exchange, RPC over HTTP/S, Outlook Web Access (OWA) on Apache, OWA on Apache

Using Apache 2 with Outlook Web Access (OWA) it’s very easy. This solution is even working when Apache installed on Windows XP and this solution can save a lot of money :), not necessary to buy Windows Server, additional Exchange Server licence or ISA Server. First, we need to enable some useful modules:

proxy
headers

Now, we need to edit / create a VirtualHost section (or use Include conf/extra/httpd-vhosts. conf, remember to make following changes inside httpd-vhosts. conf ):

<VirtualHost 1.2.3.4:80>
ServerName exmail.admininfo.ca
DocumentRoot /var/www/html/exchange
RedirectMatch ^/(index.html?)$ https://exmail.admininfo.ca/exchange/
RedirectMatch ^/exchange$ https://exmail.admininfo.ca/exchange/
</VirtualHost>

<VirtualHost 1.2.3.4:443>
# This secures the server from being used as a third party
# proxy server
ProxyRequests Off

# Allows the proxying of a SSL connection
SSLProxyEngine On
ProxyVia On

DocumentRoot /home/user/mail_proxy/html/
RequestHeader set Front-End-Https “On”

ServerName mail

# Set up SSL to work with this host
SSLEngine On
SSLCertificateFile /etc/apache/webmail-proxy/server.crt
SSLCertificateKeyFile /etc/apache/webmail-proxy/server.key

SSLProxyMachineCertificateFile /etc/apache/webmail-proxy/certnew.cer

ProxyPass /exchange/ https://mail-internal/exchange/
ProxyPassReverse /exchange/ https://mail-internal/exchange/

ProxyPass /exchweb/ https://mail-internal/exchweb/
ProxyPassReverse /exchweb/ https://mail-internal/exchweb/

ProxyPass /public/ https://mail-internal/public/
ProxyPassReverse /public/ https://mail-internal/public/

ProxyPreserveHost On
</VirtualHost>

NOTE: If you are using Apache on Windows, remember to make changes accordingly.

Jul 2 2008   7:53PM GMT

“Outlook Anywhere” and problems with IPv6 in Windows Server 2008



Posted by: Michael Khanin
Exchange 2003, IPv6, Exchange 2007, Exchange, Windows Server 2008, RPC over HTTP/S, Outlook Anywhere

It’s not a secret, that IPv6 has some “issues”. When I’ve been in Seattle, at last MVP summit, a lot of IT professionals said that, and all of them recommended to disable IPv6 on Windows 2008 or / and Vista machines. Kevin Reeuwijk from “Innovative Technology Weblog” posted a very good article; Outlook Anywhere is ‘broken’ on IPv6 in Windows Server 2008.
So, if you run Exchange 2007 on Windows Server 2008 and want to use Outlook Anywhere (aka RPC over HTTP) you probably get a problem. It would not work if the RPC-over-HTTP Proxy and the Exchange Mailbox installed on the same Windows 2008 Server.
To make the long story short, simply unselect IPv6 from the properties of your NIC AND (it’s very important) make a changes to the HOSTS file. Simply open up your hosts file and make the following changes:

  • Comment out the line “:::1    localhost”
  • Add the following two lines:

         <IPv4 address>    <hostname of the computer>
<IPv4 address>    <FQDN of the computer>

This will resolve all queries for your computer’s name to its IPv4 address, effectively disabling the use of IPv6 for self-communication. You can confirm that this works by doing a “telnet localhost 6004″.