Koozali.org: home of the SME Server

Https

AndrewD

Https
« on: January 18, 2002, 05:06:48 PM »
Does anybody know how I can forward HTTPS web requests to an Windows2000 IIS server internally? I would like to access OWA on the Exchange server thru HTTPS. I have tried the ProxyPass directive but it fails on returning the Windows certificate.

Anybody have any ideas? My boss is on my back and doesnt want OWA accessed thru normal HTTP.

Thanks heaps for any replies.

Andrew.

SniperG

Re: Https
« Reply #1 on: January 18, 2002, 06:25:55 PM »
You could use the module below to port forward req to IIS ..I am using this already so I know it works
Remember to forward to port 443 and not 80 :-)

http://www.e-smith.org/contrib/rpm-index/RPM-e-smith-ipportfw-0.1.1-1.src.html

SniperG

Re: Https
« Reply #2 on: January 18, 2002, 06:25:56 PM »
You could use the module below to port forward req to IIS ..I am using this already so I know it works
Remember to forward to port 443 and not 80 :-)

http://www.e-smith.org/contrib/rpm-index/RPM-e-smith-ipportfw-0.1.1-1.src.html

AndrewD

Re: Https
« Reply #3 on: January 19, 2002, 01:26:16 AM »
Thaks for the reply, however I dont really want to portfwd port 443. There is an existing secure site on SME and if I portfwd, it wont be able to be accessed.

Thanks for your suggestion anyhow.

SniperG

Re: Https
« Reply #4 on: January 19, 2002, 05:32:28 AM »
Thanks for your reply on my topic b4.  
Maybe you coudl try the following, although it may be to much hassle ....

Tell people to goto http://your-ip-address:(some port other than 80 or 443) and then forward whatever port you pick to 443 on your internal win2k box

Don't know if this is what you want either but it may get some people off your back :-))


PS

How do I add the win2k to the SME hostnames ....??  I will look for it while I wait for your reply but if your quicker than me that will help :-)

SniperG™

AndrewD

Re: Https
« Reply #5 on: January 19, 2002, 05:46:21 AM »
Go to your SME admin page, click hostnames & addresses and then CREATE A NEW HOSTNAME FOR A LOCAL HOST. Enter your Win2k server name and local IP. Then when your initiate a vpn session, you will be able to ping the win2k box.

e.g. ping win2k.yourdomain.com

or

ping win2k

If that doesn’t help, let me know and I'll send a howto on setting up vpn to the Win2K server. It's not as easy as adding portforwarding as you will need to forward an IP Protocol (Protocol id:47) as well.

Good luck.