• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

OWA 2003 on ISA 2000 - HELP

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> Server Publishing >> OWA 2003 on ISA 2000 - HELP Page: [1]
Login
Message << Older Topic   Newer Topic >>
OWA 2003 on ISA 2000 - HELP - 6.Nov.2007 1:37:58 AM   
sglj3

 

Posts: 4
Joined: 6.Nov.2007
Status: offline
Hello everyone:

I have followed the 5 steps to publishing an OWA website using ISA 2000.  I have established the certificate server on my W2K3 AD and installed the cert on OWA.  My internal users are able to get to the OWA server.  Externally though it is not working.  My ISP has established the A record and it resolves via DNS and NSLOOKUP.  I only have a single Exchange Svr as the site has 40 employees.

I have reviewed the article ste by step several times and don't seem to be missing anything.  When I go to the OWA externally it shows an attempt to connect to the IP on the ISA external interface but does not bring up OWA.  Is this a publishing error, listening error or something else?

Any help would be greatly appreciated!!


Post #: 1
RE: OWA 2003 on ISA 2000 - HELP - 6.Nov.2007 7:01:28 PM   
AHIT

 

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline
I take it the 5 steps you are referring to are the 5 articles linked from http://www.isaserver.org/tutorials/pubowa2003toc.html?

I guess the process from ehre is to work out whether theres is NO functioning OWA externally.. . or it's merely a certificate (SSL) problem.
Can you get to http://mail.domain.com (or whatever the address is). If prompted for credentials it could be either the internal OWA itself or perhaps a 'secured' publishing of that site on ISA. The ISA web logs would indicate which way this is.. if there's NOTHING on the standard http port then check the publishing rule to ensure there is, even if just for test purposes.

From there you can start to narrow down certifcate issues but lets make it 'simpler' first.

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to sglj3)
Post #: 2
RE: OWA 2003 on ISA 2000 - HELP - 7.Nov.2007 12:15:28 AM   
sglj3

 

Posts: 4
Joined: 6.Nov.2007
Status: offline
If I go to http://owa.domain.org externally it brings up the default website for http://www.domain.org

If we go to https://owa.domain.org is attempts to go to the IP but never connects

Internally if we go to http://owa.domain.org is says requires SSL

Internally if we go to https://owa.domain.org it works perfectly.

I don't think it is a Cert issue as it is not even making the connection when we try over 443...

I appreciate any ideas/suggestions you have

(in reply to AHIT)
Post #: 3
RE: OWA 2003 on ISA 2000 - HELP - 7.Nov.2007 1:44:05 AM   
AHIT

 

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline
quote:

ORIGINAL: sglj3

If I go to http://owa.domain.org externally it brings up the default website for http://www.domain.org

If we go to https://owa.domain.org is attempts to go to the IP but never connects

Given the other optiosn DO work internally, can I assume that your running a split DNS infrastructure? in that you run DNS inside your network for local resolution and you public DNS records are hosted elsewhere (isp for example).

given the externall referred owa.domain.org connects to the default website, then thee's a problem with the 'published website' within ISA - quite possibly not using host-headers to connect through to the internal site. The HTTPS would fail because there is no secure/SSL 'default site'.
ins aying default site, do you mean the default 'standard webpage for the domain' or a standard IIS type setup page? I'm assuming the later but either way methinks the web-publish rule hasn't been setup correctly.

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to sglj3)
Post #: 4
RE: OWA 2003 on ISA 2000 - HELP - 7.Nov.2007 9:15:26 AM   
sglj3

 

Posts: 4
Joined: 6.Nov.2007
Status: offline
quote:

ORIGINAL: AHIT

quote:

ORIGINAL: sglj3

If I go to http://owa.domain.org externally it brings up the default website for http://www.domain.org

If we go to https://owa.domain.org is attempts to go to the IP but never connects

Given the other optiosn DO work internally, can I assume that your running a split DNS infrastructure? in that you run DNS inside your network for local resolution and you public DNS records are hosted elsewhere (isp for example). 

given the externall referred owa.domain.org connects to the default website, then thee's a problem with the 'published website' within ISA - quite possibly not using host-headers to connect through to the internal site. The HTTPS would fail because there is no secure/SSL 'default site'.
ins aying default site, do you mean the default 'standard webpage for the domain' or a standard IIS type setup page? I'm assuming the later but either way methinks the web-publish rule hasn't been setup correctly.


Yes it is a split DNS.

Is there a setting that is not included in the 5 step process for enabling host-header usage?  Default site yes as I said it goes to the www.domain.org site.

I agree it seems like the OWA site is either not being properly directed or the listener is not functioning but I can't find anything that is not setup as directed.  Any more suggestions?

Thanks for you help so far.

(in reply to AHIT)
Post #: 5
RE: OWA 2003 on ISA 2000 - HELP - 7.Nov.2007 11:57:57 AM   
sglj3

 

Posts: 4
Joined: 6.Nov.2007
Status: offline
So this morning we rebooted ISA and low and behold it now works - too bad that was not part of the instructions...

Anyway, now the certificate is not running so OWA works and even though https: is showing the connectino is not secured.  Any ideas now?

(in reply to sglj3)
Post #: 6
RE: OWA 2003 on ISA 2000 - HELP - 7.Nov.2007 7:22:49 PM   
AHIT

 

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline
quote:

ORIGINAL: sglj3
I agree it seems like the OWA site is either not being properly directed or the listener is not functioning but I can't find anything that is not setup as directed.  Any more suggestions?

I think theres a couple of problems.
1. The ISA server is not listening to SSL requests at all ('cause the https://www.domain.org just flat it didnt return anything) Perhaps not imported correctly or not bound to the listener correctly - http://isaserver.org/tutorials/pubowa2003part4.html
2. I think the last stage/step of forwarding host headers etc is not correct - http://isaserver.org/articles/pubowa2003part5.html

edit: Doh! I didn't see your post about the reboot - ignore #2 above.

< Message edited by AHIT -- 7.Nov.2007 7:24:20 PM >


_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to sglj3)
Post #: 7

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> Server Publishing >> OWA 2003 on ISA 2000 - HELP Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts