Link to home
Start Free TrialLog in
Avatar of freshfordian
freshfordianFlag for Ireland

asked on

SBS2011 OWA Issue: Cannot access OWA from thw web

Hi Experts

I cannot access OWA or the default server website from the internet.
Internally everything is ok.  We are using a Draytek 2860 router.  Ports 25,80, 443, 987 are open (based on canyouseeme check).  These ports are redirected to server IP via NAT.  I have rerun " Setup your internet address" wizard again and it has run successfully.  Any suggestions most welcome.  Thank you in advance
Avatar of Sajid Shaik M
Sajid Shaik M
Flag of Saudi Arabia image

are yo uable to telnet those ports with the external IP ?
Avatar of freshfordian

ASKER

No.  telnetting from internet is not enabled on router. Windows firewall is still operational on server.
disable the window firewall or create exception to the related ports in windows firewall.. all the best
What happens when you browse to the OWA?  Can you access the remote page?  Any errors / warnings in the event logs?

External DNS Setup correctly?
What happens are the following:

1. when I browse the external address (mail.mycompany.com/owa) is a 404 not found error: - The requested URL was not found on this server or page cannot be displayed

2. I get the same error when I enter mail,mycompany.com. The URL changes to https://mail.mycompany.com/remote and displays the same 404 error or Page cannot be displayed

3. If I enter the IP address of mail.mycompany.com I get the IIS7 Page.  



This looks like a DNS Error! Am I right? How can I correct it?
Other INTERNAL Checks as follows:

http://localhost/remote ................. OK
http://localhost/owa........................ OK
http://192.168.0.4/remote.............. OK
http://192.168.0.4/owa.................... OK

http://mail.mydomain.com ............ OK (redirectd itself to remote)
http://mail.mydomain.com/owa..... OK

Internal systems seem fine,
It sounds like either your router isn't forwarding the ports corerctly or you have an external DNS issue.

Rather than opening the ports on the Draytek, try doing a port re-direction and try again.

Ping mail.mydomain.com from outside of your network and confirm it is resolving to the correct IP address
Hi
Pinging mail.mycompany.com is successful.
I have port redirection setup on the Draytek for a number of ports for other applications including port 25.  The recommended ports (25,80,443,987,1723) are all redirected to the server iP.  

For example, I the following apps are working fine:
http://mail.mycompany.com:8080/ePortal
http://mail.mycompany.com:8081/media
whereas
http://mail,mycompany.com/owa: Bottom left hand corner of browser window message "Establishing Secure Connection..." then "Webpage is not available.  As outlined above, internally all is ok. It looks to me to be a possible IIS issue?
Some additional Info:
I ran an Remote Connectivity Analyser test.  Results are attached.  

Testing RPC/HTTP connectivity.
       The RPC/HTTP test failed.
       
      Additional Details       
Elapsed Time: 6515 ms.
            Test Steps
       
      Attempting to resolve the host name mail.mycompany.ie in DNS.
       The host name resolved successfully.
       
      Additional Details
      Testing TCP port 443 on host mail.mycompany.com to ensure it's listening and open.
       The port was opened successfully.
       
      Additional Details
      Testing the SSL certificate to make sure it's valid.
       The SSL certificate failed one or more certificate validation checks.
       
      Additional Details
       
Elapsed Time: 5646 ms.
       
      Test Steps
       
      The Microsoft Connectivity Analyzer is attempting to obtain the SSL certificate from remote server mail.mycompany.com on port 443.
       The Microsoft Connectivity Analyzer wasn't able to obtain the remote SSL certificate.
       
      Additional Details
       
The certificate couldn't be validated because SSL negotiation wasn't successful. This could have occurred as a result of a network error or because of a problem with the certificate installation.
Elapsed Time: 5624 ms.

This appears to narrow down the problem. Any advice from here would be most welcome,
Thank you
ASKER CERTIFIED SOLUTION
Avatar of freshfordian
freshfordian
Flag of Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
There was no apparent solution forthcoming.  We chose in the end to move away from inhouse exchange to a the cloud-based Google Apps for Education.  I do appreciate thr tips provided but I don't know of any other way to close the question fairly?