OWA access internally
Posted on 2012-09-12
We recently had a root-kit attack on our sbs2008 server. We believe we've cleaned up everything and everything is functioning normally except for the owa. I can access OWA by going to localhost/owa, log in, send/receive email, and it works great. But that is the only way that it can be accessed. I can't browse to it by IP address/owa or servername/owa.
We have confirmed we have the external DNS resolving to our external static IP correctly and that port forwarding is set up correctly. Users can still access outlook just fine on their PCs, but their smart phone accounts have stopped working. This DID work before the virus attack.
I'm very novice when it comes to IIS and OWA, but I just need to know where I should start looking for problems in this scenario.
Please let me know what additional information you require and I'll be happy to supply it.