I would submit that you're safer allowing SSL HTTP OWA only through the
firewall than you'll be by opeing the myriad ports you need to open to make
OWA work in the DMZ.  Get the KB that lists all the ports, show it to the
firewall guy, and if he has any sense, he'll agree with you.

Ed Crowley MCSE+Internet MVP
Freelance E-Mail Philosopher
Protecting the world from PSTs and Bricked Backups!T

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Larry
Wahlers
Sent: Thursday, October 21, 2004 11:59 AM
To: Exchange Discussions
Subject: RE: FE-BE 503 error

You guys are the best, ya know it? Turns out it's definitely a firewall
issue. I yanked the server out of the DMZ, stuck it on the internal network,
changed a few IP's, and voila - my FE server once again correctly found two
different mailboxes on two different servers, just like it oughtta.

I wish I could say we could get away with not having it in the DMZ, but my
security guy won't allow it on the internal network without ISA server in
the DMZ, and the guy with the $$ won't fork over the cash for ISA server, so
now it's up to my firewall guy to open the right ports so we can have it in
the DMZ and (almost) everybody will be happy. 

Thanks again for all your help. It motivated me to troubleshoot the problem
and really find out that it wasn't my FE-BE config at all, just ports on the
firewall.

====================================
Larry Wahlers, Systems Specialist
Concordia Technologies
The Lutheran Church - Missouri Synod 

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang
=english
To unsubscribe send a blank email to
%%email.unsub%%
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: 
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.

Reply via email to