Aaaarrrrggghhhh - What ports for OWA through only 1 firewall (no DMZ)besides 80

Against my very loud protest, a customer insists on deploying OWA to users on the Internet with no security in place. They nixed a front end server, SSL, VPN solution or an ISA server. My question is, what port(s), other than port 80, do I need to open up on the firewall? This is Exchange

RE: Aaaarrrrggghhhh - What ports for OWA through only 1 firewall (no DMZ) besides 80

Without SSL, it will be just port 80. Straight into the internal network? WOW! Neil -Original Message- From: Jeffrey Dubyn [mailto:[EMAIL PROTECTED] Posted At: 04 April 2003 11:34 Posted To: Swynk Exchange List Conversation: Aaaaggg - What ports for OWA through only 1

RE: Aaaarrrrggghhhh - What ports for OWA through only 1 firewall (noDMZ) besides 80

Thanks, Neil. And yes, it is painfully truestraight into the network (just like their 5.5 implementation). Hey, why mess with a good thing, right? :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Neil Hobson Sent: Friday, April 04, 2003 5:37 AM

RE: High Security for Exchange

Your admins should be the least of the concerns. IF you can't trust the admins, fire them.[1] Beyond that, tell the department to be less paranoid. Roger -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. [1] My previous

RE: High Security for Exchange

Explain to them that just because you CAN kill them 12 different ways with a plastic spoon doesn't mean you WILL do it. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. -Original Message- From: Orin Rehorst

RE: Force R**d rec**pts

We run exchange 5.5 and are moving clients to Outlook XP. Is it possible to prevent users from setting the option to not send read receipts? Harriet _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives:

RE: Aaaarrrrggghhhh - What ports for OWA through only 1 firewall (no DMZ) besides 80

You could set up IPSec tunnels between this server, the backend server, and the DCs. You could even limit those to only the ports necessary for it to function. Then you'd need to open the firewall for type 50 traffic (ESP IPSec), port 500 TCP for IKE (Key Exchange), and port 88 TCP for Kerberos.

Public folders and the user who wouldn't

So we've gone through a 5.5 -- 2000 upgrade with some minor problems. But this one has me stumped. I have one particular user who cannot be given permissions to any of our public folders. There is no error message recorded and the symptoms are the same regardless of whether I use Outlook or ESM

Re: Force R**d rec**pts

You *want* users to send them all the time? On 4/4/03 7:16, Wood, Harriet[CCS] [EMAIL PROTECTED] wrote: We run exchange 5.5 and are moving clients to Outlook XP. Is it possible to prevent users from setting the option to not send read receipts? Harriet

RE: Force R**d rec**pts

I guess there is a first time for everything -Original Message- From: Chris Scharff [mailto:[EMAIL PROTECTED] Sent: Friday, April 04, 2003 6:41 AM To: Exchange Discussions You *want* users to send them all the time? On 4/4/03 7:16, Wood, Harriet[CCS] [EMAIL PROTECTED]

Auto-Response

Is there anyway to setup an Auto-Response to Calendar Denials? _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe:

Calendar review

Exchange 2k SP3 AD mixed mode Outlook 2k clients running on NT I had a request from a manager to be able to view his subordinate's calendars, so I created a global security group to which he and his secretary belong and gave that group reviewer rights on the calendars. When they try to open the

Re: Calendar review

Use a mail enabled universal security group. On 4/4/03 9:51, Jeremy I. Shannon [EMAIL PROTECTED] wrote: Exchange 2k SP3 AD mixed mode Outlook 2k clients running on NT I had a request from a manager to be able to view his subordinate's calendars, so I created a global security group to which

RE: Aaaarrrrggghhhh - What ports for OWA through only 1 firewall (no DMZ) besides 80

At the very least, you should run URLscan on that machine so that it's not hacked immeadiately. -Kevin -Original Message- From: Jeffrey Dubyn [mailto:[EMAIL PROTECTED] Posted At: Friday, April 04, 2003 2:34 AM Posted To: Exchange Conversation: Aaaaggg - What ports for OWA

RE: Calendar review

I would if I could, but I'm in Mixed mode AD and won't be moving to native for about another 2 months. Are universal groups the only ones that work for permissions like this? The global group is mail enabled, but hidden from the GAL after I added it to the permissions. Thanks again, Jer

RE: Aaaarrrrggghhhh - What ports for OWA through only 1 firewall (no DMZ) besides 80

Here are the policies I would add for IPSec IPSec Settings: Action Source DestAddress Function Allow Any TCP443 All IP Allow all SSL traffic Allow TCP443 Any All IP Allow all SSL traffic Allow Any

RE: Problems logging off OWA

This was in the last MSD2D and might help What to do if OWA Users Can't Logoff One of our clients called recently to seek our help with a troubling problem: The OWA logoff button was prompting their users for their credentials and failing to log them off of OWA. The problem was first reported

Customizing OWA

Hi, I'm trying to add a button to the OWA navigation bar in Exchange 2000 SP3. I've got a copy of Microsoft's Customizing Microsoft Outlook Web Access, which describes how to do it, but either I've done it wrong, or it doesn't work the way that paper describes (maybe because it was written

Send a CC to an internet address as well

Hi there... Exchange 5.5 Latest SP. I was looking for the setting in the admin to allow me to CC all incoming mail to an inbox to an (external) internet address that is not in the global address list. Where can I do this? I know how to for an address in the global address list... Thanks!

RE: Send a CC to an internet address as well

Create a custom recipient -Original Message- From: Exchange Discussions [mailto:[EMAIL PROTECTED] Sent: Friday, April 04, 2003 1:31 PM To: Exchange Discussions Subject: Send a CC to an internet address as well Hi there... Exchange 5.5 Latest SP. I was looking for the setting in the

RE: Send a CC to an internet address as well

Alternate recipient. -Kevin -Original Message- From: Exchange Discussions [mailto:[EMAIL PROTECTED] Posted At: Friday, April 04, 2003 10:31 AM Posted To: Exchange Conversation: Send a CC to an internet address as well Subject: Send a CC to an internet address as well Hi

OT: Backup Exec 8.6

Does anyone know of a quick way to print off or copy the Backup selections list? Basically I need to create an excel file that shows: Server Name: C:\*.* /Subdirs Etc Joshua Morgan Method IQ Senior Network Engineer Main: (864) 272-1145 Mobile: (864) 449-9912 Email: [EMAIL

RE: Public folders and the user who wouldn't

Well, after a day of frustration I disconnected the user from her Exchange mailbox via ADUC, then reconnected her through ESM. I think she'll be all right now, although I have a sneaking suspicion that this account is going to be one of those which, ten years from now we'll be saying you know,

exchange2000 restore

Hi all, MSX2000+SP3 I am using the following article http://support.microsoft.com/default.aspx?scid=kb;en-us;297289 I have got this error when starting the RESTORE (using NTBACKUP from a server different than the exchange server), for the restore I have selected logfiles+mailbox store+public

Blocked Attachments

I have some users that can't open attachments, because Outlook has blocked them. I have tried the Level1 Remove (which was edit in the registry), and Outlook still blocks it. I have research this problem and the only answer i see is editing the registry with LEVEL1 REMOVE in the security portion

RE: Blocked Attachments

Have the sender use a zip file instead of an unsafe file type? -Kevin -Original Message- From: Smith Thomas Contr 911 SPTG/SC [mailto:[EMAIL PROTECTED] Posted At: Friday, April 04, 2003 4:20 PM Posted To: Exchange Conversation: Blocked Attachments Subject: Blocked Attachments

MSX2000 restore

Hi all, MSX2000+SP3 I am using the following article http://support.microsoft.com/default.aspx?scid=kb;en-us;297289 I have got this error when starting the RESTORE The Specified computer is not a microsft exchange server or its microsoft exchange services are not started yes the services are

Re: Blocked Attachments

Either you've failed to properly edit the registry or your organization uses the Outlook security form which overrides and client settings. Verify the registry settings, or use Ken Slovak's add-in which sets the correct registry setting. If you still can't access them in Outlook (which is probably

RE: Aaaarrrrggghhhh - What ports for OWA through only 1 firewall (noDMZ) besides 80

Patrick - This IS the backend server - there is no separate OWA server and they won't allow any separate server (like an ISA or certificate server). They did relent somewhat and will now allow SSL. I guess it's now just a matter of time... Jeff -Original Message- From: [EMAIL