RE: RPC over HTTP problems

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 23 Feb 2005 06:25:11 -0800

Andrew,

Have you been anywhere close to any of the articles you've been pointed
to?
You keep trying to shotgun this process and you absolutely cannot do
that.

Fact: if ISA isn't doing what you think you told it to, then you
probably messed it up somewhere.  This is a standard Exch deployment and
IF you follow the instructions written by half-a-dozen knowledgeable
folks, you can get there.

Q1 - what have you used to validate that RPC/HTTP is functional inside?
By default, OL2K3 will use HTTP ONLY as a fallback protocol to contact
the Exch server
Q2 - what are the OL2K3 settings you've used to connect to the RPC
proxy?

-----Original Message-----
From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, February 22, 2005 8:57 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: RPC over HTTP problems

http://www.ISAserver.org

I have basically pin pointed the issue down to ISA and the rule I think.


The PRC proxy works internally. And HTTPS works flawlessly but for some
reason the traffic is getting hung at ISA Server. When I monitor the
logs all I see now is HTTPS 443 coming in but nothing happens from that
point on wards. Except that Outlook is unavailable to find the Exchange
Server...

Shurg

Oh and Outlook /rpcdiag shows outlook trying to connect to Directory,
and exchange.domainname.com then both attempts vanish and the error
message about not being able to find Exchange Server appears. 

Andrew




-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Tuesday, February 22, 2005 11:49 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: RPC over HTTP problems

http://www.ISAserver.org

I saw it the first time.
How the site resolves on the Internet has absolutely no bearing on how
it resolves internally.
Oranges and roadapples...

-----Original Message-----
From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, February 22, 2005 5:44 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: RPC over HTTP problems

http://www.ISAserver.org


Hi Jim, 

 

My last message didn't show up on this thread, wonder why. So here goes
again.

 

These people had there server setup as their domainname.local initially,
and use their owa.domainname.com for OWA, email ,etc. I recall that
there can be issues when using .local as suppose to .com especially when
doing RPC over HTTP. Do you have any ideas on what I should do other
than rebuilding their entire network? :-)

 

Thanks

Andrew

 

 

________________________________

From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Tuesday, February 22, 2005 4:42 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: RPC over HTTP problems

 

http://www.ISAserver.org

Kb's are your friends:

http://support.microsoft.com/search/default.aspx?query=rpc+over+http&cat
alog=LCID%3D1033&qryWt=Microsoft+Office+2003&mode=r&cus=False&x=11&y=17 

 

What OS?

RPC/HTTP is only supported on WinXP and later.

 

-------------------------------------------------------

   Jim Harrison

   MCP(NT4, W2K), A+, Network+, PCG

   http://isaserver.org/Jim_Harrison/
<http://isaserver.org/Jim_Harrison/> 

   http://isatools.org <http://isatools.org/> 

   Read the help / books / articles!

-------------------------------------------------------

 

________________________________

From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, February 22, 2005 13:30
To: [ISAserver.org Discussion List]
Subject: RE: [isalist] RE: RPC over HTTP problems

 

Hi Jim,

 

The client runs Office 2003 Pro, thus Outlook 2003. We are installing
SP1 as I type this message and will test it again, but can I be sure
that its related to not having SP1?

 

We have the client machine connected to a DSL modem in the same office
but non of the traffic goes through the server, it all goes out to over
the internet back into the office. 

 

Thanks

Andrew

 

 

________________________________

From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Tue 2/22/2005 4:28 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: RPC over HTTP problems

http://www.ISAserver.org

RPC/HTTP doesn't use the RPC application filter.

Any "real" RPC traffic you see is a result of client misconfiguration.

 

What is the client you're using (OS/SP/Office ver / patches)?

Where is the client operating from; internal or external to ISA?

 

-------------------------------------------------------

   Jim Harrison

   MCP(NT4, W2K), A+, Network+, PCG

   http://isaserver.org/Jim_Harrison/
<http://isaserver.org/Jim_Harrison/> 

   http://isatools.org <http://isatools.org/> 

   Read the help / books / articles!

-------------------------------------------------------

 

________________________________

From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] 
Sent: Tuesday, February 22, 2005 13:14
To: [ISAserver.org Discussion List]
Subject: RPC over HTTP problems

 

Hi,

 

I have setup RPC over HTTP along with OWA using Tom's Exchange / ISA
info. Though I don't think there is any problem with his material I am
having a problem wirh RPC. The OWA with SSL works flawlessly. 

 

When I setup the log in ISA to only look at the machine that we are
using on the external side to connect to RPC over HTTP its able to
negoicate with HTTPS on 443 without any problems but the RPC (all
interfaces) id denied access by the default rule. I am wondering is
there something else I need to set on ISA to enable the RPC protocol to
work?

 

Thanks

Andrew

 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
andrew@xxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
andrew@xxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 

All mail to and from this domain is GFI-scanned.

All mail to and from this domain is GFI-scanned.


All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
andrew@xxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.



Other related posts: