Solved

OWA not reachable from outside on the Internet

Posted on 2004-10-27
806 Views
Last Modified: 2008-02-01
I have setup my OWA server on the inside with a FE and BE.  However from the outside I have a Public IP address and when I go to that nothing comes up.  I have in my checkpoint FW nated the public IP address to the FE server internal NIC.  That way when someone goes to the Public IP address for OWA they will be routed to the internal NIC.  

Just to let you know that I have the necessary ports turned on, I'm allowing port 25 from the outside fW and my FE is in the DMZ.  From the DMZ to my internal network where my BE server is I'm allowing ports 25, 80, 52, 3268, POP3, 389, and a host of others.  So I dont know why I cant get to my OWA from the outside.  Also I tried to type http:// server IP address  and still nothing.

Please help...

thanks
0
Question by:spurlockb
    7 Comments
     
    LVL 2

    Accepted Solution

    by:
    Just checking, you are allowing port 80 from Outside to the DMZ right?  Also, I would recommend SSL for OWA (port 443).  Does OWA work from the internal LAN?
    0
     

    Author Comment

    by:spurlockb
    Yes OWA does work from the internal lan.  AS for port 80 from outside to the dmz, the test that I ran tonight was telneting on port 25 to the public ip address and i could get in.  But then again thats how mail comes in thru port 25.  So then I tried telneting to port 80 and was not able to get from the interent to the public ip address.  But then again i'm not sure if you are suppose to be able to get to port 80 of an FE from the internet.  So to answer the question I was not able to telnet to port 80 from the internet to the public IP address.
    0
     
    LVL 15

    Expert Comment

    by:scampgb
    Hi spurlockb,

    Getzie is right about the ports that need opening.  
    Port 25 is SMTP - that's used for transferring emails between email systems.  For OWA you will need ports TCP/80 (HTTP) and TCP/443 (HTTPS) to be port forwarded to your FE server.

    Make sure that you IIS configuration allows connections from all IP addresses.  Do this in IIS Manager, Exchange virtual server, properties, Directory security, IP address...

    There's a very handy tutorial on this at http://www.msexchange.org/tutorials/OWA_Exchange_Server_2003.html

    I suggest that you check the above, and if it doesn't work, please let us know exactly what happens when you try to access the page.
    0
     

    Author Comment

    by:spurlockb
    Should I be able to telnet to port 80 just like i was to port 25?
    0
     

    Author Comment

    by:spurlockb
    What are some test that I can do on the inside of my network to confirm that OWA is working?  Meaning what can I do to make sure that exchange FE is accepting http and smtp?  Because then I can atleast say that my internal stuff is working and then I could start looking at the firewall.

    Thanks
    0
     
    LVL 15

    Expert Comment

    by:scampgb
    spurlockb:
    > Should I be able to telnet to port 80 just like i was to port 25?
    Yes, but you need to tell it do do something:

    telnet <servername> 80
    GET /


    (couple of returns at the end)  You should get a load of HTML, and hopefully not an error message :-)

    As for internal tests - you said that you were able to access OWA internally, and that you've telnetted to port 25 from the external address.   They're the most conclusive tests in this case.

    I think it's either a firewall/router problem or an issue with your IIS config.  Can you check these?
    0
     

    Author Comment

    by:spurlockb
    I will check with the firewall and router, besides that what can  I do on IIS to make sure that its not something I setup wrong.  Dont get me wrong I'm not trying to rule out the FW and router I just want to make sure 99.9 % thats its something that I didnt do.

    Thanks
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Hire Top Freelancers to Complete Exchange Projects

    Source the talented Expert Exchange community
    for top quality work on your Exchange projects.

    Hire the best. Collaborate easily. Get quality work.

    Email signatures have numerous marketing benefits. Here are 8 top reasons to turn your email signature into a marketing channel.
    "Migrate" an SMTP relay receive connector to a new server using info from an old server.
    To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
    In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

    884 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now