ozzy

Not sure if this is possible or not. We have Outlook Web Access and want to install an HTTP reverse proxy in our DMZ to handle external client requests to our webmail.

I want to open ports 80 and 443 on our firewall and direct them to the reverse proxy. I then want to proxy the requests through a second firewall into our Exchange server.

I'd prefer the proxy queries to only go via port 80 or 443 ssl, but I'm not sure if this is allowed.

Clients would connect via something like http://webmail.ourdomain.com/exchange but the actual internal server would be http://ourserver.ourdomain.com/exchange

I did a test with Apache 2.0.52 and although it connected over http if I clicked any buttons the url would change to the internal one and therefore be unresolved by the client.

ne1 any experience of this?

Stefan

stevencotton

You need ProxyPassReverse statements for the URI's you're proxying as well as the ProxyPass directives.

iainmac

Your reverse proxy may need to do link translation to stop the links appearing as internal urls to the external clients.
MS ISA 2000 and ISA 2004 both do this and have specific filters for proxy publishing OWA .

ozzy

Yeah, we have ISA 2004 here already. I would rather avoid using it since it's fat and bloated, but if it's easier I might be lazy.

Stefan

JasonHook

I did a couple of presentations recently and i can mail you them if you'd like.

stevencotton

You'll only need to do any link modification if the app was written extremely badly. I'm amazed ISA has that as a feature, a big mess to cover a big mess

ozzy

No, not a cover-up. They just designed it so that it was easier to user their own products