exchange, OWA,

I have primary site with domain: abc.mail.lan at ohio.

 and one other AD site at Dayton as also domain.lan  , I used OWA worked fine inside my office and outside my office that is at home for both these sites which are having forest relationship.

our squid proxy behind the firewall handles all the owa traffic which had hardcoded IP address to our exchange server which is at primary site.

 but the other AD sites are having child -domain relationship with primary site from sites like  phx.abc-mail.lan
and.abc-mail.lan .

when I used OWA using user mail box of one of the other AD sites like one is in phoenix internally from my primary site  I can connect from inside  to other AD sites from my primary AD site - but cant from home to those same AD sites which are having child domain relationship.

 my question is:

 If I connect to one of their AD sites  through RDP from my office at primary AD site and do nslookup when on their exchange server to our owa address I get the proxy server ip reply.so how it is connecting internally in office fine  and not from home

AD sites having forest relationship -owa works fine internally in office and outside office using same OWA URL defined in proxy squid server

AD Sites having child relationship -owa works fine internally in office but not from home.

 do I need to create separate A record for those other AD sites like phy.abc-mail.lan /owa in my squid proxy server?
pramod1Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Tom CieslikIT EngineerCommented:
If you have exchange on phy.abc-mail.lan and exchange machine name is phy just create in your External DNS:

A record that will point to phy on your domain abc-mail.lan
A record that will point to autodiscover.abc-mail.lan

MX record phy.abc-mail.lan

Create CNAME (alias)

autodiscover.abc-mail.lan   to   phy.abc-mail.lan


In TXT record add your Exchange name
v=spf1 ip4:xx.xx.xx.xx a:phy.abc-mail.lan mx:abc-mail.lan ptr ~all

And make sure your Certificate installed on Exchange has 2 names inside
autodiscover.abc-mail.lan
phy.abc-mail.lan
0
pramod1Author Commented:
my question is:

each AD site has its own autodiscover side, I can connect to all AD sites internally in office but not externally, what I am missing in my proxy squid config and how is it that I am able to owa internally ?
0
Tom CieslikIT EngineerCommented:
If you're connecting internally then you're not using proxy. I believe proxy it's been used for connections from inside to outside.
If you're connection from outside then you're using External DNS
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

pramod1Author Commented:
we have proxy sqid server which has OWA and autodiscover url which directs traffic from external to internal.
0
Tom CieslikIT EngineerCommented:
So this is some kind of firewall.
Make sure you've published this Exchange on it.
Make sure you have port 443 and ports 143, 110, 25 rerouted from outside to Exchange.
0
pramod1Author Commented:
I am sorry sir you are still not able to answer my question
how can I owa into other AD sites sitting from my corporate site fine if I am not using proxy ?
but same I cant connect from outside my site
0
Tom CieslikIT EngineerCommented:
That's why because You don't use proxy inside.
I't trying to explain you.
If you think that you're using proxy to connect between sides then You must missed something in your firewall. That's why is not working from outside.
Try to compare side A firewall settings with Side B firewall settings.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.