RE: RPC over HTTP using ISA Server 2004 SP1 and Exchange 2003 SP1

Hi Chris,

What are the EXACT settings on the TO tab and the PUBLIC NAME tab of the
RPC over HTTP Web Publishing Rule?

Also, remember you can use the same listener for OWA FBA and RPC over
HTTP.

HTH, 


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Chris [mailto:chris@xxxxxxxxxxxxxxxxxxxxx] 
Sent: Saturday, April 23, 2005 1:04 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RPC over HTTP using ISA Server 2004 SP1 and Exchange
2003 SP1

http://www.ISAserver.org

Hi All,

I am having issues with RPC over HTTP working properly through my ISA
2004
server.  I have my ISA 2004 server configured as an edge firewall with
two
NIC's, one Public WAN NIC, and one private LAN NIC.  NAT is enabled on
the
box to provide internet access to LAN clients.  I have a box setup that
is
acting as a DC/GC, Exchange 2003 SP1 mailbox server, RPC Proxy Server,
and
RPC over HTTP Backend Exchange server. HTTP over RPC works fine via VPN
and internally, so I think my backend box is provisioning RPC over HTTP
properly.   When I attempt to connect over the internet using RPC over
HTTP via my ISA 2004 box, it takes about 90 seconds to be presented with
an authentication box, then the connection simply fails.  OWA (using
SSL)
works fine going through the ISA 2004 box.  I can also hit the /rpc
virtual directory using SSL going through my ISA box too.  Upon
reviewing
the ISA logs I am receiving "Failed Connection Attempt" and "0xa03"
error
information codes.  Here are some entries from my ISA log file showing
the
activity over ports 593, 6002, and 6004.

4/23/2005 12:03 68.53.163.32    192.168.10.1    443     https   Failed
Connection
Attempt RPC over
HTTP    Domain\Username External                RPC_IN_DATA
http://server.domain.com:443/rpc/rpcproxy.dll?server.domain.com:593
0xa03   0.0.0.0 ISA     server.domain.com       TCP     -       -
Yes     Reverse
Proxy                   -       -       0       64      MSRPC
Internet        -       -               350     0       413
0x8     Web Proxy Filter

4/23/2005 12:01 68.53.163.32    192.168.10.1    443     https   Failed
Connection
Attempt RPC over
HTTP    Domain\Username External                RPC_IN_DATA
http://server.domain.com:443/rpc/rpcproxy.dll?server.domain.com:6002
0x203   0.0.0.0 ISA     server.domain.com       TCP     -       -
Yes     Reverse
Proxy                   -       -       0       64      MSRPC
Internet        -       -               1422    0       414
0x8     Web Proxy Filter

4/23/2005 12:03 68.53.163.32    192.168.10.1    443     https   Failed
Connection
Attempt RPC over
HTTP    Domain\Username External                RPC_IN_DATA
http://server.domain.com:443/rpc/rpcproxy.dll?server.domain.com:6004
0xa03   0.0.0.0 ISA     server.domain.com       TCP     -       -
Yes     Reverse
Proxy                   -       -       0       64      MSRPC
Internet        -       -               341     0       414
0x8     Web Proxy Filter



Traffic is getting to the Exchange/RPC Proxy server as indicated by it's
log files:

2005-04-23 02:51:53 192.168.10.1 RPC_IN_DATA /rpc/rpcproxy.dll
server.domain.com:6002 443 domain\username 68.53.163.32 MSRPC 200 0 0

2005-04-23 02:51:53 192.168.10.1 RPC_OUT_DATA /rpc/rpcproxy.dll
server.domain.com:6002 443 domain\username 68.53.163.32 MSRPC 200 0 0

Again, both OWA and RPC over HTTP work just fine when connecting via a
VPN
connection.  OWA works fine when connecting over the internet with or
without a VPN connection.  Everthing works great with the exception of
RPC
over HTTP when coming in over the internet witout using a VPN
connection. 
I am bridging SSL, not terminiating and redirecting to port 80.  I can
use
the same laptop computer and connect to RPC over HTTP internally and via
VPN, but using this same laptop the connection fails when coming in over
the internet when a VPN connection is not used..???

Thanks in advance for the help, I have log files and a diagram of my
network that i can send you.  This is a test lab where I am kicking the
tires around on ISA 2004.

Chris.



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx




Other related posts: