That's another theory too...  However, on the PIX there are some strange
occurrences that would not pass some HTTP traffic correctly.  Not always,
but I've seen it.

D

"Ignorance: It's amazing how much easier it is for a team to work together
when no one has any idea where they're going." - - http://www.despair.com

-----Original Message-----
From: Peter Szabo [mailto:[EMAIL PROTECTED]] 
Sent: Monday, December 17, 2001 6:06 PM
To: Exchange Discussions
Subject: Re: Help please


Ronald,

If your external address for your owa is tahoe.ss-pca.com/exchange then you
have an authentication problem on your OWA server, nothing to do with your
proxy or PIX. for a proxy server or a pix f/w http is http is http.
<period>. On your OWA server diasble any other authentication but Basic. If
I remember correctly internaly users can access OWA, yes ?

/Peter

----- Original Message -----
From: "Don Ely" <[EMAIL PROTECTED]>
To: "Exchange Discussions" <[EMAIL PROTECTED]>
Sent: Monday, December 17, 2001 8:47 PM
Subject: RE: Help please


> Have you turned up syslog on your PIX to watch the traffic?  What do 
> the logs say (both Proxy and the PIX)?  My money says your issue 
> resides in there.
>
> D
>
> "It was when I found out I could make mistakes that I knew I was on to 
> something." -Ornette Coleman
>
> -----Original Message-----
> From: Ronald Mazzotta [mailto:[EMAIL PROTECTED]]
> Sent: Monday, December 17, 2001 5:14 PM
> To: Exchange Discussions
> Subject: RE: Help please
>
>
> Yes that article has been followed to the letter.  I apologize for the 
> ms reference so could we get back to this. It is becoming increasingly 
> frustrating.  It SHOULD work.
>
> -----Original Message-----
> From: Tom Meunier [mailto:[EMAIL PROTECTED]]
> Sent: Monday, December 17, 2001 4:52 PM
> To: Exchange Discussions
> Subject: RE: Help please
>
> 1.  Your MX record has no bearing on the issue - that's solely for 
> mail routing.  You need to worry about where your "A" record (or CNAME 
> if
that's
> how you're doing it) points.
> 2.  I'm still kind of waiting for you to say that you've followed 
> Q276388
to
> the letter.  Whether OWA 5.5 works through proxy has nothing to do 
> with whether OWA 2000 does; they are nowhere NEAR being the same 
> product.
>
>
> > -----Original Message-----
> > From: Ronald Mazzotta [mailto:[EMAIL PROTECTED]]
> > Posted At: Monday, December 17, 2001 02:54 PM
> > Posted To: MSExchange Mailing List
> > Conversation: Help please
> > Subject: RE: Help please
> >
> >
> > Yeah sorry.  My mx record is exchange.domain.com. when a user enters 
> > exchange.domain.com/exchange they hit the proxy.  Proxy is set up to 
> > redirect any requests for this address to the internal exchange 
> > address. This is as per M$.
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED] 
> > [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, December 17, 2001 3:56 PM
> > To: Exchange Discussions
> > Subject: RE: Help please
> >
> > Upgrade to version 6.0 IOS.  Use the Static Port commands to 
> > redirect users to the internal OWA site instead of your Proxy Server 
> > first. This works even if your using a DMZ card.  Also, can you 
> > clarify "redirect my MX record
> > exchange server address to the server"?
> >
> > Also...
> >
> > How many valid static IP's to you have?
> > Is your DNS hosted external or internal?
> > When you upgraded did you change any of the static IP information?
> >
> >
> > -----Original Message-----
> > From: Ronald Mazzotta [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, December 17, 2001 2:41 PM
> > To: Exchange Discussions
> > Subject: Help please
> >
> >
> >
> > I tried this on the exchange 2000 list and got very little 
> > information. I have a setup as follows:
> >
> > Pix Firewall-->Proxy serv/IIS server-->internal network containing 
> > exchange.  We have had exchange 5.5 and OWA running in this config 
> > for some time.  We have recently upgraded to Exchange2000 and are 
> > now having a problem connecting with owa 2000.  When going to the 
> > owa site a login box comes up to log into exchange BUT it comes up 
> > three times then says
> > access denied.  I have the IIS/proxy web publishing set to redirect my
> > MX record exchange server address to the server but can never log in.
> > If anyone got ANY ideas I would greatly appreciate it.
> >
> > Ron
> >
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> >
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> >
> > _________________________________________________________________
> > List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> > Archives:               http://www.swynk.com/sitesearch/search.asp
> > To unsubscribe:         mailto:[EMAIL PROTECTED]
> > Exchange List admin:    [EMAIL PROTECTED]
> >
>
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
>
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]
>
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to