Email port forwarding

[ToddGivens]

We've got a pix 501 with one public IP address that has open ports to http, https and smtp. Both http and https forwards all requests to 192.168.0.1 - web serverA.

All SMTP requests forward to 192.168.0.2 - exchange serverA.

The problem is - To allow outlook web access, exchange needs to accept http and https port requests. We need to be able to host the existing website on web serverA, but still allow web access on exchange serverA. Any suggestions?

 

[MoobyCow]

If you can not get another public IP you'll have to let your users know that in order to access OWA they'll have to specify the port they are connecting on.

like so -- https:\\mail.yourdomain.com:9999

This usses https to connect on port 9999

You can then have that port forwarded to your server. You may need to also change the default HTTP and HTTPS ports on your server.

 

[ToddGivens]

Thanks a bunch for your response, I was afraid of that. Security is the only reservation I have about opening another port. Is there a port any more or less vulnerable?

Thanks again, Todd

 

[MoobyCow]

What you can do is just use HTTPS and not let in regular HTTP on that port. Your users are going to need to use the port number, you might as well force them to use HTTPS as well.

As for which port to use, I don't know off hand which are more or less secure. I do know there are more than a few known to be used by viruses.

http://home.cfl.rr.com/lbwolf/ports/

 

[PScottC]

Another option would be to install Exchange as a FE server on the existing web server and use host headers to control which website is accessed.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[ToddGivens]

Thanks for your help. Unfortunately the ISP won't provide a block of IP addresses, so I went ahead and configured a different port for web access. I am hoping this back-fire down the road.

Thanks so much,

Todd