OWA not connecting from outside the domain 2

[max8699]

Hi, Just installed the Pain in the neck exchange server, Finally got it working. When i tried out OWA it works fine from inside the domain, ie a pc next to the server.
However if i try to log in from home it just can't find the server and times out. Any ideas??
Nedd basic help here not an exchange expert.
Regards
Max

 

[paulha]

Is your pain in the neck firewall allowing the HTTP traffic through ?

 

[max8699]

Yep The firewall is open on port 443 (i think will have to log in and have a look to be sure) to allow http traffic through.

 

[paulha]

You will need 80 open for HTTP,
If you are using HTTPS then 443 is good

 

[ADW]

Are there any external A records provided by your ISP pointing to your exchange server with a public IP?

 

[58sniper]

You don't need port 80. In fact, you shouldn't use it. Forward 443 through the firewall. Enable SSL and Forms Based Authentication.

Create an A record that points to your public IP address. Something like office.domain.com.

Test using

https://office.domain.com/exchange

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[max8699]

ok,
have opened port 443 and i can now get into to read mail with OWA from outside the domain using

HTTPS://mail.themailserver.au/exchange

but it now comes up and asks about a certificate with a warning that it may not be a correct certificate. If you click on yes and continue it comes up with the login page. Type in the name and password and your are in and reading the mail.
I take it now i need to set up a certificate?
How do i go about doing that?
Regards
Max

 

[58sniper]

Securing Outlook Web Access using SSL

http://www.msexchange.org/tutorials/MF004.html

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[monsterjta]

First, you would have already setup a Cert if your using SSL. But, it sounds to me that your Cert CN doesn't match up.

Hope This Helps,

Good Luck!

 

[max8699]

OK,
for those that came in late and sat in the back of the class. how would one go about checking the "cert CN" for matching?

Thanks for all the help so far guys
Regards
Max

 

[monsterjta]

What is the Common Name associated with your current cert? If you open the cert (ie: look at the details), you should be able to read the common name. Does it match the published A record for the OWA site?

Check this out. Super easy, detailed instructions on how to secure your OWA implementation.

http://support.microsoft.com/kb/555053

58sniper also posted a good tutorial on this.

Hope This Helps,

Good Luck!

 

[max8699]

many thanks