Outlook web access not accessible from the outside

Our OWA stopped working from the external IP.  Not exactly sure when it stopped, so its hard to pinpoint what caused it. Updates from microsoft were installed recently.  It works great internally. When hitting from an external IP, it does not make it to the login screen, just says page cannot be displayed.

My first thought was that the port was blocked on the firewall, but that has been tested and is open.  I have ports 80 and 443 open. My default site refreshes and sends you to the exchange dir. I can see the default site load and refresh, so I know I'm hitting the server on port 80 at least.

I've read tons of articles, but not really found any that match exactly.  There's a link out there for a problem with an exchange 2007 rollup that seem similar, but the problem ultimately was different.

This is on Microsoft windows server 2003 (sp2?) with exchange 2003 (ver 6.5.7638.1)
calebkraftAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

myhcCommented:
turn friendly errors off in your local internet browser.  then view the website again.

you should get a nice long error.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
domgelatoCommented:
Just to double check, you can reach it from the inside, right? Have you run the Best Practices Analyzer?
0
calebkraftAuthor Commented:
I can see it from inside, no problem.  

where would I find the best practices analyzer?
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

domgelatoCommented:
It should be installed with the Exchange Tools, however if it isn't you can grab it here: http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-4BEE-4943-AC22-E2DDBD258DF3&displaylang=en And you would want to run a health check.
0
calebkraftAuthor Commented:
I don't see a friendly error setting .  using firefox3 and IE7 where is it hiding?
0
calebkraftAuthor Commented:
running the best practices analyzer...

is there something specific I should be looking for?  Is it supposed to throw up a flag if it finds something wrong?  I have tons of nested details about my config, but nothing really ensightful.
0
myhcCommented:
Under advanced in tools on IE7. i thinkit's about 1 3rd down.
0
domgelatoCommented:
As long as you run a "Health Check" from the "start a new scan" page, you should get back a list of details about your server configuration. A red "x" signifies a problem, a yellow triangle a warning, and a blue exclamation mark for informational stuff. If you view only the "critical" tab, you'll see items that would affect something like OWA. If there's nothing in there, then you'll probably have to move on to another solution.
0
calebkraftAuthor Commented:
wow, well apparently my backup system isn't getting the mailbox store... good to know.
other critical errors: global incoming message size not set and global outgoing message size not set.

also heapdecommitfreeblockthreshold not set.

none of those really look like they should affect owa.
0
calebkraftAuthor Commented:
I had a client connect with friendly errors turned off.  they said it didn't give them any errors.
0
myhcCommented:
Does the server have any IIS or FTP / telnet proticals?
0
calebkraftAuthor Commented:
it has IIS6
0
calebkraftAuthor Commented:
0
myhcCommented:
you have a SonicFirewall working on HTTPS

HTTPS is required for exchange, I belive.  Can you change the port of the admin for the Firewall? Or stop remote access.  I think it's in the way..
0
domgelatoCommented:
Well, I've run out of ideas, although I can tell you that the page that I get redirected to from the link you posted is giving me an "Error reading from socket" when I connect to it with a text-based browser. :-(
0
calebkraftAuthor Commented:
I have changed the port for admin access to the firewall now.
0
myhcCommented:
WAY !!! Works!!
0
myhcCommented:
remember it's "https://mail.custom-powder.com" (!! HTTPS !!))
0
calebkraftAuthor Commented:
Thanksy myhc, you fixed it. you get the most points.

thanks for your time domgelato, you get some points for helping me with the best practices too.... gotta get those backups fixed.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.