[isalist] Re: Supporting RPC Outlook Clients

  • From: "Thor (Hammer of God)" <thor@xxxxxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 14 Apr 2006 10:14:21 -0700

http://www.ISAserver.org
-------------------------------------------------------
  
Ewe.

t


On 4/14/06 10:10 AM, "Jim Harrison" <Jim@xxxxxxxxxxxx> spoketh to all:

> http://www.ISAserver.org
> -------------------------------------------------------
> 
> Yeh - he needs to resolve his .local TLD externally.
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
> Behalf Of Thor (Hammer of God)
> Sent: Friday, April 14, 2006 10:09
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Supporting RPC Outlook Clients
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
> Whatever entry you would put in the hosts file... Just put it in DNS instead.
> Am I missing something here?
> 
> t
> 
> 
> On 4/14/06 9:34 AM, "Rob Moore" <RMoore@xxxxxxxx> spoketh to all:
> 
>> http://www.ISAserver.org
>> -------------------------------------------------------
>> 
>> We actually do have a real split DNS, with a .org zone. We use it for
>> a few DNS entries. What would I need to put into it to make this work?
>> It's got an entry for mail.afsc.org that points to the internal
>> address, as well as an entry for delta.afsc.org (the name of our
>> Exchange server is delta.afsc.local) that also points to the internal
>> address.
>> 
>> Rob
>> 
>> -----Original Message-----
>> From: isalist-bounce@xxxxxxxxxxxxx
>> [mailto:isalist-bounce@xxxxxxxxxxxxx]
>> On Behalf Of Thor (Hammer of God)
>> Sent: Friday, April 14, 2006 12:26 PM
>> To: isalist@xxxxxxxxxxxxx
>> Subject: [isalist] Re: Supporting RPC Outlook Clients
>> 
>> http://www.ISAserver.org
>> -------------------------------------------------------
>>   
>> Why not just create a new zone for your .org in AD and skip the whole
>> hosts thing??
>> 
>> 
>> On 4/14/06 9:22 AM, "Rob Moore" <RMoore@xxxxxxxx> spoketh to all:
>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>> 
>>> Getting which to work? Here's the URL (posted in my original
>>> question)
>> 
>>> for getting the RPC over HTTP to work:
>>> http://www.isaserver.org/articles/2004securerpc.html. It does work.
>>> 
>>> My question is about editing the Hosts file via a script, so I don't
>>> have to instruct my users how to do it themselves (or where to put a
>>> pre-modified one). What I'd like to be able to do is give them a
>>> script and say, "Here, double-click this" and have the script make
>>> the
>> 
>>> appropriate addition to the Hosts file.
>>> 
>>> Thanks,
>>> Rob
>>> 
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx
>>> [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of Andrew English
>>> Sent: Friday, April 14, 2006 12:26 PM
>>> To: isalist@xxxxxxxxxxxxx
>>> Subject: [isalist] Re: Supporting RPC Outlook Clients
>>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>>   
>>> Uhm,
>>> 
>>> With all that said and done how about posting the URL of the tutorial
>>> that Tom wrote (I think) on getting it to work?
>>> 
>>> Andrew
>>> 
>>> 
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx
>>> [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of Jim Harrison
>>> Sent: Friday, April 14, 2006 10:10 AM
>>> To: isalist@xxxxxxxxxxxxx
>>> Subject: [isalist] Re: Supporting RPC Outlook Clients
>>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>>   
>>> Oops.
>>> Read it inside-out - I understood it as RPC/HTTP - you're actually
>>> using MAPI.
>>> 
>>> The problem is that the OL clients are going to look for ".local"
>>> because that's the domain where the Exch server lives.  As such, you
>>> have to give them this hosts file setting.
>>> This is one of the main reasons Tom (and I) dislike the ".local"
>>> domain construct.
>>> 
>>> You can use a logon script to modify the hosts file.
>>> 
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx
>>> [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of Rob Moore
>>> Sent: Friday, April 14, 2006 6:51 AM
>>> To: isalist@xxxxxxxxxxxxx
>>> Subject: [isalist] Re: Supporting RPC Outlook Clients
>>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>>   
>>> I'm not finding anything along those lines in the article by Tom.
>>> Where can I find that?
>>> 
>>> Thanks,
>>> Rob
>>> 
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx
>>> [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of Jim Harrison
>>> Sent: Friday, April 14, 2006 9:32 AM
>>> To: isalist@xxxxxxxxxxxxx
>>> Subject: [isalist] Re: Supporting RPC Outlook Clients
>>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>>   
>>> What did you enter in the "Use this URL..." field?
>>> 
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx
>>> [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of Rob Moore
>>> Sent: Friday, April 14, 2006 5:55 AM
>>> To: isalist@xxxxxxxxxxxxx
>>> Subject: [isalist] Supporting RPC Outlook Clients
>>> 
>>> Using: ISA 2004 Standard, Server 2003, Outlook 2003.
>>> 
>>> I've finally gotten around to implementing RPC over HTTP for my
>>> Outlook clients. We have a split DNS, with our internal DNS names
>>> ending in ".local".
>>> 
>>> I've gotten an external client to connect, but only if I add the
>>> Exchange server's external IP address and internal name to the Hosts
>>> file on the external PC (as described in Tom's article
>>> http://www.isaserver.org/articles/2004securerpc.html
>>> <http://www.isaserver.org/articles/2004securerpc.html> ). When I
>>> configure the client, I put in "mail.afsc.org"--the public name of
>>> our
>> 
>>> Exchange server--as the server name. When it resolves, it resolves to
>>> "delta.afsc.local"--the internal name of our Exchange server. This
>>> resolution works, even without the addition to the Hosts file.
>>> However, without the addition to the Hosts file, the client can't
>>> actually connect to "delta.afsc.local".
>>> 
>>> So, these are my questions:
>>> 1. Is there a way around using the Hosts file?
>>> 2. If not, can someone tell me how to script the necessary info into
>>> the Hosts file? (I'm not much of a scripter, and I'd like to avoid
>>> giving my fairly non-technical users instructions for editing it
>>> themselves.)
>>> 
>>>         Alternatively, I suppose I could create the necessary Hosts
>>> file and give that to them. But there are a couple of problems with
>> that:
>>> first, our non-techie users would likely put it in the wrong place;
>>> second, I've found that our anti-spyware program also uses the Hosts
>>> file, and I don't want to mess that up.
>>> 
>>>         I can't use AD to make the changes to the Hosts file because
>>> many of the computers that need the change are personal computers
>>> that
>> 
>>> are not members of our domain.
>>> 
>>> Thanks,
>>> Rob
>>> 
>>> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
>>> Rob Moore
>>> Network Manager
>>> 215-241-7870
>>> Help Desk: 800-500-AFSC
>>> 
>>> 
>>> All mail to and from this domain is GFI-scanned.
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> 
>>> All mail to and from this domain is GFI-scanned.
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> 
>>> 
>> 
>> 
>> ------------------------------------------------------
>> List Archives: //www.freelists.org/archives/isalist/
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server Articles and Tutorials:
>> http://www.isaserver.org/articles_tutorials/
>> ISA Server Blogs: http://blogs.isaserver.org/
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>> Report abuse to listadmin@xxxxxxxxxxxxx
>> 
>> ------------------------------------------------------
>> List Archives: //www.freelists.org/archives/isalist/
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server Articles and Tutorials:
>> http://www.isaserver.org/articles_tutorials/
>> ISA Server Blogs: http://blogs.isaserver.org/
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>> Report abuse to listadmin@xxxxxxxxxxxxx
>> 
>> 
>> 
> 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> All mail to and from this domain is GFI-scanned.
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: