One thing you might want to look at is Outlook Web Access (OWA). It allows access to Exchange via a web interface (duh). I played around with it a bit but that was a while ago so my memory is a bit fuzzy. I believe you can install the Web access piece on the Exchange server or a separate box. I think the problem you might be running into is that Exchange use RPC for a lot of its communication. I am a little brain dead right now (been writing Openview docs all day....yeech) but I think the OWA piece would work well for you. If I recall correctly you can use SSL to encrypt the traffic if you so desire. You can get all the info you want off of M$ web site. This solution sidesteps the issue somewhat but I think the end result will work well. If you find another approach I would be interested in hearing about it. Bill Pennington Consultant Lucid NetworX ----- Original Message ----- From: Dan Schlitt <schlittat_private> To: <firewall-wizardsat_private> Sent: Thursday, October 07, 1999 12:37 PM Subject: How do folks firewall MS Exchange? > > How do folks work access to an MS Exchange server through a firewall? > > We are under pressure to install MS Exchange in our mixed unix/NT > environment and allow access from outside our local network. > > I checked the archives and didn't find anything that helped me. > > Currently we limit outside access from the Internet to ssh to a unix host. > Port forwarding makes it possible to do all of the things that have been > required in the past. But now the folks on the sales side of the company > want to have MS Exchange installed so they can use its calendaring and > other functions. > > We have attempted to use the port forwarding to make exchange work and we > have also tried Lotus Notes. No luck. Maybe we have missed something. This > would be our preferred approach. > > So we are now looking for a firewall solution to this problem. Have any of > you our there encountered this problem. How did you solve it? > > Thanks. > > /dan > > -- > > Dan Schlitt > schlittat_private > >
This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:42:48 PDT