Link to home
Start Free TrialLog in
Avatar of pramod1
pramod1Flag for United States of America

asked on

exchange, OWA,

I have primary site with domain: abc.mail.lan at ohio.

 and one other AD site at Dayton as also domain.lan  , I used OWA worked fine inside my office and outside my office that is at home for both these sites which are having forest relationship.

our squid proxy behind the firewall handles all the owa traffic which had hardcoded IP address to our exchange server which is at primary site.

 but the other AD sites are having child -domain relationship with primary site from sites like  phx.abc-mail.lan
and.abc-mail.lan .

when I used OWA using user mail box of one of the other AD sites like one is in phoenix internally from my primary site  I can connect from inside  to other AD sites from my primary AD site - but cant from home to those same AD sites which are having child domain relationship.

 my question is:

 If I connect to one of their AD sites  through RDP from my office at primary AD site and do nslookup when on their exchange server to our owa address I get the proxy server ip reply.so how it is connecting internally in office fine  and not from home

AD sites having forest relationship -owa works fine internally in office and outside office using same OWA URL defined in proxy squid server

AD Sites having child relationship -owa works fine internally in office but not from home.

 do I need to create separate A record for those other AD sites like phy.abc-mail.lan /owa in my squid proxy server?
Avatar of Tom Cieslik
Tom Cieslik
Flag of United States of America image

If you have exchange on phy.abc-mail.lan and exchange machine name is phy just create in your External DNS:

A record that will point to phy on your domain abc-mail.lan
A record that will point to autodiscover.abc-mail.lan

MX record phy.abc-mail.lan

Create CNAME (alias)

autodiscover.abc-mail.lan   to   phy.abc-mail.lan


In TXT record add your Exchange name
v=spf1 ip4:xx.xx.xx.xx a:phy.abc-mail.lan mx:abc-mail.lan ptr ~all

And make sure your Certificate installed on Exchange has 2 names inside
autodiscover.abc-mail.lan
phy.abc-mail.lan
Avatar of pramod1

ASKER

my question is:

each AD site has its own autodiscover side, I can connect to all AD sites internally in office but not externally, what I am missing in my proxy squid config and how is it that I am able to owa internally ?
If you're connecting internally then you're not using proxy. I believe proxy it's been used for connections from inside to outside.
If you're connection from outside then you're using External DNS
Avatar of pramod1

ASKER

we have proxy sqid server which has OWA and autodiscover url which directs traffic from external to internal.
So this is some kind of firewall.
Make sure you've published this Exchange on it.
Make sure you have port 443 and ports 143, 110, 25 rerouted from outside to Exchange.
Avatar of pramod1

ASKER

I am sorry sir you are still not able to answer my question
how can I owa into other AD sites sitting from my corporate site fine if I am not using proxy ?
but same I cant connect from outside my site
ASKER CERTIFIED SOLUTION
Avatar of Tom Cieslik
Tom Cieslik
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial