http://www.ISAserver.org ------------------------------------------------------- ISA doesn't do anything; the RPC/HTTP client specifies those ports. The URL is constructed by the RPC/HTTP client as: RPC_[IN | OUT]_DATA /rpcproxy.dll?exchserver:port HTTP/1.x -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thor (Hammer of God) Sent: Thursday, June 28, 2007 9:43 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Those kicks just keep getting harder to find http://www.ISAserver.org ------------------------------------------------------- The RPCProxy default ports are 100-500 or some such on the Ex box. That's fine for internal use of RPC/HTTP as it will work without changes via RPC endpoint lookup, but if you publish via ISA, when ISA talks to the RPCProxy, it uses 6001-6002 and 6004. If you do not change the ValidPorts config in the RPDProxy key, your ISA pub rule will fail. That's the facts Jack! t -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Thursday, June 28, 2007 9:24 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Those kicks just keep getting harder to find http://www.ISAserver.org ------------------------------------------------------- What ISA edits you be maky? ISA no care what ports happen between RPCProxy & Exchange - all happen behind ISA. -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thor (Hammer of God) Sent: Thursday, June 28, 2007 9:14 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Those kicks just keep getting harder to find http://www.ISAserver.org ------------------------------------------------------- The publisher to Exchange only usey those portie. If you no makey edits for ISA, it no workie. t -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison Sent: Thursday, June 28, 2007 9:06 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Those kicks just keep getting harder to find http://www.ISAserver.org ------------------------------------------------------- Er - "..via ISA, which only uses those RPC ports.."? ISA no be control those ports for RPC/HTTP. -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thor (Hammer of God) Sent: Thursday, June 28, 2007 8:47 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Those kicks just keep getting harder to find You also might be asking yourself "Hey Self, why did the Exchange Team not include the 6000-6004 RPC port range by default in Ex2k3 when they know that the only way people would deploy RPC/HTTP over the Internet is via ISA, which only uses those RPC ports." Because it's more fun to make the admin edit the registry while telling them "if you edit the registry, we are not responsible for your system anymore" particularly when that's they only possible way it can work! t From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder Sent: Thursday, June 28, 2007 8:09 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Those kicks just keep getting harder to find "You might be asking yourself "Hey Tom, why did you enable RPC/HTTP in the Exchange Server configuration when you haven't installed the RPC/HTTP Proxy service yet?" The reason why I did it this way was to show off the Exchange development team's sense of humor. Sure, they could have configured things so that when you enable Outlook Anywhere it would check to see if the RPC/HTTP Proxy service was installed, but it's a lot more fun for them to think about you trying to troubleshoot for a few days why RPC/HTTP isn't working. You'd think they'd get enough jollies by making you use PowerHell for the certificate request and assignment." :\ Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://blogs.isaserver.org/shinder/ Book: http://tinyurl.com/3xqb7 MVP -- Microsoft Firewalls (ISA) All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx