Hi,

I am currently using Pound to proxy a number of services from a Windows Small 
Business server (OWA, OutlookAnywhere, ActiveSync)

These all work fine (including Outlook RPC over HTTPS) but for some reason the 
RD Gateway functionality of the SBS server doesn't work.

When attempting to use the RD Gateway via Pound the following is logged:

pound: host.example.com A.B.C.D - - [17/Apr/2012:14:34:24 +0800] "RPC_IN_DATA 
/rpc/rpcproxy.dll?localhost:3388 HTTP/1.1" 000 - "" "MSRPC" (rpc -> 
192.168.7.10:80) 0.001 sec
pound: host.example.com A.B.C.D - - [17/Apr/2012:14:34:33 +0800] "RPC_OUT_DATA 
/rpc/rpcproxy.dll?localhost:3388 HTTP/1.1" 401 58 "" "MSRPC" (rpc -> 
192.168.7.10:80) 0.002 sec
pound: (7fdbc35dd700) e500 for A.B.C.D error copy client cont to 
192.168.7.10:80/RPC_OUT_DATA /rpc/rpcproxy.dll?localhost:3388 HTTP/1.1: 
Connection reset by peer (0.008 sec)

The 401 response in the second log entry makes me think it is related to 
authentication against the RD Gateway which may be due to the fact that the RD 
Gateway only allows NTLM authentication (while Outlook RPC over HTTPS allows 
basic or NTLM depending on configuration).  Both methods are enabled on the 
"Rpc" virtual directory in IIS.

Has anyone deployed Pound as a reverse proxy for a RD Gateway? I know it is 
possible with ISA/TMG but I would rather not be forced to bear the cost of 
another Windows licence plus a TMG licence.

Of course I am aware that NTLM authentication over HTTP is a horrid abuse of 
HTTP, but I am really hoping there is a undocumented option for Pound along the 
lines of "AllowNTLMRFCViolations on" :)

Thanks.



Andrew Heberle
Technical Specialist
Saxxon IT

Phone : 0429 415 784
Email : [email protected]


This e-mail message and any files transmitted with it contain confidential 
information intended only for the person(s) to whom this e-mail is addressed; 
if you have received this e-mail message in error, please notify the sender 
immediately by telephone or e-mail and destroy the original message without 
making a copy. Thank you.


--
To unsubscribe send an email with subject unsubscribe to [email protected].
Please contact [email protected] for questions.

Reply via email to