Topic: Proxypass question ??

[steve288]

I want to try to have an internal Exchange server be accessable from the outside world. To do this I want to pass the internal web address to the external world through the SME server. I'm a novice on proxie pass, but understand there was a panel for v6 of SME. Is there a panel for v7 ?

The command lines that I have found  eg. see below are less clear than the panels. And If it does not work I don't know how to remove the proxy pass that has been configured with these commands. PS if you know how I to to remove the specific proxy pass once it is set up with these commands, if I want to remove them, can you tell me.

Thanks.

db domains set proxypassdomain.com domain
db domains setprop proxypassdomain.com Nameservers internet
db domains setprop proxypassdomain.com ProxyPassTarget http://xxx.xxx.xxx.xxx/
db domains setprop proxypassdomain.com TemplatePath ProxyPassVirtualHosts
signal-event domain-create proxypassdomain.com

[raem]

steve288

db domains delete proxypassdomain.com
signal-event post-upgrade
reboot

To see how to use the db command syntax type
db

[steve288]

Wonderfull, thank you very much.


I don't know if you or anyone else can answer this but I have tried using proxie pass but it does not seem to be doing what I want. Perhaps I don't understand it or need to do more.

Employees have the ability to access their email by typing //exchange/exchange in a browser from behind the firewall.

I want them to get to their email from the outside world.

I have created an Ibay called exchange.  Somewhere I read that I needed to do this for this to work. I made the I bay accessable for everyone with no password.

I executed the following command based on the very short wiki article on proxy pass.

db domains set exchange domain
db domains setprop exchange domain Nameservers internet
db domains setprop exchange ProxyPassTarget http://10.1.0.2/
db domains setprop exchange TemplatePath ProxyPassVirtualHosts
signal-event domain-create exchange

I dont know if this is right or not but any confirmation to my process would be apreciated.

The thing is Im asuming that when I go to my outside Ip address for this computer (this sme server doesnt have an outside domain name) so if it was http://200.256.134.234/exchange/ (this is not my real ip address), but when I go here all I get is my Ibay.

What am I missing. I think I should be getting my password prompt from my exchange server to get to the email accounts.

Regards

[raem]

steve288

> db domains setprop exchange domain Nameservers internet

In the above command
exchange
needs to be a domain name

Search the bugzilla for a bug that refers to proxypass as I think it has some other command info you need to do what you are asking.

[steve288]

Great thanks. I will search for it and probably be back with more questions.

Thanks.

[pfloor]

2 questions for you Steve...

1-What version of exchange are you trying to connect to?
2-Does your version of exchange require https and not http?

[steve288]

Good questions.

Its 2003 Exchange and no it does not require https.  At least when we access it from inhouse it does not require https.

I have tried to search for articles in the bugzilla regarding proxy pass but cant find anything that specifically relates to my problem. I find buzilla hard to understand thats my problem.

If you or anyone can provide any help I would apreaciate it. The previous person was helpfull in saying that in this command
db domains setprop exchange domain Nameservers internet
the word exchange (which is the internal name of the server ) needs to be a domain name. But the SME computer just has an ip address and the internal computer is just an internal computer with no FQDM because its internal. Despite reading the help I guess I really dont know how to run this command or if there are any pre things that need to be done to achieve my goal.
Regards

[raem]

steve288

I have tried to search for articles in the bugzilla regarding proxy pass but cant find anything that specifically relates to my problem. I find buzilla hard to understand thats my problem.

A bugzilla search on proxy pass then following a few links to other bugs found this in about 3 minutes.

http://bugs.contribs.org/show_bug.cgi?id=1612

I think the additional part of the command in the bug refers to proxypass to an ibay

For a sub-URL:

rt=ProxyPass
    HTTP=no
    HTTPS=yes
    Description=RequestTracker
    Target=http://localhost:81/rt

[raem]

steve288

The previous person was helpfull in saying that in this command
db domains setprop exchange domain Nameservers internet
the word exchange (which is the internal name of the server ) needs to be a domain name. But the SME computer just has an ip address and the internal computer is just an internal computer with no FQDM because its internal.

In your first post you said "I want to try to have an internal Exchange server be accessable from the outside world. To do this I want to pass the internal web address to the external world through the SME server."

You now say you do not have a domain name that external people are going to use to access the sme or the exchange servers. That does not make sense.

The proxypassdomain.com part of the first command you posted, is the external domain name you will use to access the internal exchange server. Internal users would also use the same link, I assume.
The ProxyPassTarget http://xxx.xxx.xxx.xxx/ part of the command will be the internal IP number of the exchange server eg http://192.168.2.136/ or whatever.

What local IP number can the exchange server be reached on now, as that is the IP number you would put in the command above eg can you reach the exchange server using //192.168.2.136 (or whatever) ?

[mmccarn]

This post describes how I configured 'proxypass' to expose outlook web access through a SME server without using port forwarding: http://forums.contribs.org/index.php?topic=40075.0

(there's more to it than simply setting up a single 'proxypass' directive).

There should *not* be an ibay named 'exchange' - this procedure creates a template-fragment that creates and exposes http://smeserver/exchange

[steve288]

Ray,

I guess I asumed (ignoranly perhaps) that I could forward an ip address. eg. If I can go to an ip address for example on my sme box eg xxx.xxx.xxx.xxx I can get a web page. I was believing that you could go to xxx.xxx.xxx.xxx and it would take me to my exchange server which is 10.1.0.2. or better yet I would like to go to xxx.xxx.xxx.xxx/exchange and go to my exchange server.

Regarding your added info of

For a sub-URL:

rt=ProxyPass
    HTTP=no
    HTTPS=yes
    Description=RequestTracker
    Target=http://localhost:81/rt

Is this to be put in a file? I read the  link but its not clear to me.  And is rt the name of the directory and 81 the port that you want people to access it from?
Regards

[steve288]

mmccarn:

Thanks I will take a look at it

Regards

[pfloor]

Ray,

I guess I asumed (ignoranly perhaps) that I could forward an ip address.

You are mixing up forwarding with proxypass, they are two different concepts.

eg. If I can go to an ip address for example on my sme box eg xxx.xxx.xxx.xxx I can get a web page. I was believing that you could go to xxx.xxx.xxx.xxx and it would take me to my exchange server which is 10.1.0.2.

Then why fiddle around with all this proxypass stuff when you may not need it.  Have you tried just going to the port forwarding panel and forwarding port 80 to 10.1.0.2?

[steve288]

mmccarn:

I have read over your post proxypass for exchagne /outlook web acccess.

I guess I put the whole thing in a script and run it.

I dont know that much about domain names and such. Will I be able to go to the ip address of the sme server and then /exchange and in theory the web site should open.

Is this script the only thing I need to do. eg forget all the proxypass / portforward stuff Ive been playing with.

Sorry to be a nob but this has been a bugaboo around here for some time and Im trying to resolve what others have failed at.

Regards

[steve288]

pfloor

Thanks for your question. Actually Yes I did do this and it did not work for me. So I asumed that Proxy pass would be the answer. Although perhaps I did not do it right?? Since it did not work.

Thanks.