[isalist] Re: Supporting RPC Outlook Clients

  • From: "Rob Moore" <RMoore@xxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 14 Apr 2006 14:55:36 -0400

http://www.ISAserver.org
-------------------------------------------------------

Me, too, scripting wise.

When you "Check Name" to resolve the IP address, it resolves to the
internal name (delta.afsc.local), which puts me back to square one. Oh,
well.

Rob

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of John T (Lists)
Sent: Friday, April 14, 2006 2:29 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Supporting RPC Outlook Clients

http://www.ISAserver.org
-------------------------------------------------------
  
As for scripting editing of the HOSTS file, I have no idea since I am
extremely poor on scripting.

As for the external client, why not put the Public IP address associated
with the address you are trying to script directly into Outlook?

John T
eServices For You

"Seek, and ye shall find!"


> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx 
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of
> Rob Moore
> Sent: Friday, April 14, 2006 11:14 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Supporting RPC Outlook Clients
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> How does that benefit a client that's never seen the inside of our 
> network, and is not VPN'd into our network? Unless I'm mistaken, 
> modifying the internal DNS of our internal network won't help that 
> client. Hence the Hosts file. And in fact our internal network does 
> have entries in the .org zone for mail.afsc.org, delta.afsc.org, and 
> (of
> course) delta.afsc.local in the .local zone.
> 
> Rob
> 
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx 
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thor (Hammer of God)
> Sent: Friday, April 14, 2006 1:09 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: Supporting RPC Outlook Clients
> 
> http://www.ISAserver.org
> -------------------------------------------------------
> 
> Whatever entry you would put in the hosts file... Just put it in DNS 
> instead.  Am I missing something here?
> 
> t
> 
> 
> On 4/14/06 9:34 AM, "Rob Moore" <RMoore@xxxxxxxx> spoketh to all:
> 
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > We actually do have a real split DNS, with a .org zone. We use it 
> > for a few DNS entries. What would I need to put into it to make this
work?
> > It's got an entry for mail.afsc.org that points to the internal 
> > address, as well as an entry for delta.afsc.org (the name of our 
> > Exchange server is delta.afsc.local) that also points to the 
> > internal
> address.
> >
> > Rob
> >
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Thor (Hammer of God)
> > Sent: Friday, April 14, 2006 12:26 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: Supporting RPC Outlook Clients
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Why not just create a new zone for your .org in AD and skip the 
> > whole hosts thing??
> >
> >
> > On 4/14/06 9:22 AM, "Rob Moore" <RMoore@xxxxxxxx> spoketh to all:
> >
> >> http://www.ISAserver.org
> >> -------------------------------------------------------
> >>
> >> Getting which to work? Here's the URL (posted in my original
> >> question)
> >
> >> for getting the RPC over HTTP to work:
> >> http://www.isaserver.org/articles/2004securerpc.html. It does work.
> >>
> >> My question is about editing the Hosts file via a script, so I 
> >> don't have to instruct my users how to do it themselves (or where 
> >> to put a pre-modified one). What I'd like to be able to do is give 
> >> them a script and say, "Here, double-click this" and have the 
> >> script make the
> >
> >> appropriate addition to the Hosts file.
> >>
> >> Thanks,
> >> Rob
> >>
> >> -----Original Message-----
> >> From: isalist-bounce@xxxxxxxxxxxxx
> >> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> >> On Behalf Of Andrew English
> >> Sent: Friday, April 14, 2006 12:26 PM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Re: Supporting RPC Outlook Clients
> >>
> >> http://www.ISAserver.org
> >> -------------------------------------------------------
> >>
> >> Uhm,
> >>
> >> With all that said and done how about posting the URL of the 
> >> tutorial
> 
> >> that Tom wrote (I think) on getting it to work?
> >>
> >> Andrew
> >>
> >>
> >> -----Original Message-----
> >> From: isalist-bounce@xxxxxxxxxxxxx
> >> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> >> On Behalf Of Jim Harrison
> >> Sent: Friday, April 14, 2006 10:10 AM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Re: Supporting RPC Outlook Clients
> >>
> >> http://www.ISAserver.org
> >> -------------------------------------------------------
> >>
> >> Oops.
> >> Read it inside-out - I understood it as RPC/HTTP - you're actually 
> >> using MAPI.
> >>
> >> The problem is that the OL clients are going to look for ".local"
> >> because that's the domain where the Exch server lives.  As such, 
> >> you have to give them this hosts file setting.
> >> This is one of the main reasons Tom (and I) dislike the ".local"
> >> domain construct.
> >>
> >> You can use a logon script to modify the hosts file.
> >>
> >> -----Original Message-----
> >> From: isalist-bounce@xxxxxxxxxxxxx
> >> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> >> On Behalf Of Rob Moore
> >> Sent: Friday, April 14, 2006 6:51 AM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Re: Supporting RPC Outlook Clients
> >>
> >> http://www.ISAserver.org
> >> -------------------------------------------------------
> >>
> >> I'm not finding anything along those lines in the article by Tom.
> >> Where can I find that?
> >>
> >> Thanks,
> >> Rob
> >>
> >> -----Original Message-----
> >> From: isalist-bounce@xxxxxxxxxxxxx
> >> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> >> On Behalf Of Jim Harrison
> >> Sent: Friday, April 14, 2006 9:32 AM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Re: Supporting RPC Outlook Clients
> >>
> >> http://www.ISAserver.org
> >> -------------------------------------------------------
> >>
> >> What did you enter in the "Use this URL..." field?
> >>
> >> -----Original Message-----
> >> From: isalist-bounce@xxxxxxxxxxxxx
> >> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> >> On Behalf Of Rob Moore
> >> Sent: Friday, April 14, 2006 5:55 AM
> >> To: isalist@xxxxxxxxxxxxx
> >> Subject: [isalist] Supporting RPC Outlook Clients
> >>
> >> Using: ISA 2004 Standard, Server 2003, Outlook 2003.
> >>
> >> I've finally gotten around to implementing RPC over HTTP for my 
> >> Outlook clients. We have a split DNS, with our internal DNS names 
> >> ending in ".local".
> >>
> >> I've gotten an external client to connect, but only if I add the 
> >> Exchange server's external IP address and internal name to the 
> >> Hosts file on the external PC (as described in Tom's article 
> >> http://www.isaserver.org/articles/2004securerpc.html
> >> <http://www.isaserver.org/articles/2004securerpc.html> ). When I 
> >> configure the client, I put in "mail.afsc.org"--the public name of 
> >> our
> >
> >> Exchange server--as the server name. When it resolves, it resolves 
> >> to
> 
> >> "delta.afsc.local"--the internal name of our Exchange server. This 
> >> resolution works, even without the addition to the Hosts file.
> >> However, without the addition to the Hosts file, the client can't 
> >> actually connect to "delta.afsc.local".
> >>
> >> So, these are my questions:
> >> 1. Is there a way around using the Hosts file?
> >> 2. If not, can someone tell me how to script the necessary info 
> >> into the Hosts file? (I'm not much of a scripter, and I'd like to 
> >> avoid giving my fairly non-technical users instructions for editing

> >> it
> >> themselves.)
> >>
> >>         Alternatively, I suppose I could create the necessary Hosts

> >> file and give that to them. But there are a couple of problems with
> > that:
> >> first, our non-techie users would likely put it in the wrong place;

> >> second, I've found that our anti-spyware program also uses the 
> >> Hosts file, and I don't want to mess that up.
> >>
> >>         I can't use AD to make the changes to the Hosts file 
> >> because many of the computers that need the change are personal 
> >> computers that
> >
> >> are not members of our domain.
> >>
> >> Thanks,
> >> Rob
> >>
> >> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> >> Rob Moore
> >> Network Manager
> >> 215-241-7870
> >> Help Desk: 800-500-AFSC
> >>
> >>
> >> All mail to and from this domain is GFI-scanned.
> >>
> >> ------------------------------------------------------
> >> List Archives: //www.freelists.org/archives/isalist/
> >> ISA Server Newsletter: 
> >> http://www.isaserver.org/pages/newsletter.asp
> >> ISA Server Articles and Tutorials:
> >> http://www.isaserver.org/articles_tutorials/
> >> ISA Server Blogs: http://blogs.isaserver.org/
> >> ------------------------------------------------------
> >> Visit TechGenix.com for more information about our other sites:
> >> http://www.techgenix.com
> >> ------------------------------------------------------
> >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> >> Report abuse to listadmin@xxxxxxxxxxxxx
> >>
> >> ------------------------------------------------------
> >> List Archives: //www.freelists.org/archives/isalist/
> >> ISA Server Newsletter: 
> >> http://www.isaserver.org/pages/newsletter.asp
> >> ISA Server Articles and Tutorials:
> >> http://www.isaserver.org/articles_tutorials/
> >> ISA Server Blogs: http://blogs.isaserver.org/
> >> ------------------------------------------------------
> >> Visit TechGenix.com for more information about our other sites:
> >> http://www.techgenix.com
> >> ------------------------------------------------------
> >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> >> Report abuse to listadmin@xxxxxxxxxxxxx
> >>
> >>
> >> All mail to and from this domain is GFI-scanned.
> >>
> >> ------------------------------------------------------
> >> List Archives: //www.freelists.org/archives/isalist/
> >> ISA Server Newsletter: 
> >> http://www.isaserver.org/pages/newsletter.asp
> >> ISA Server Articles and Tutorials:
> >> http://www.isaserver.org/articles_tutorials/
> >> ISA Server Blogs: http://blogs.isaserver.org/
> >> ------------------------------------------------------
> >> Visit TechGenix.com for more information about our other sites:
> >> http://www.techgenix.com
> >> ------------------------------------------------------
> >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> >> Report abuse to listadmin@xxxxxxxxxxxxx
> >>
> >> ------------------------------------------------------
> >> List Archives: //www.freelists.org/archives/isalist/
> >> ISA Server Newsletter: 
> >> http://www.isaserver.org/pages/newsletter.asp
> >> ISA Server Articles and Tutorials:
> >> http://www.isaserver.org/articles_tutorials/
> >> ISA Server Blogs: http://blogs.isaserver.org/
> >> ------------------------------------------------------
> >> Visit TechGenix.com for more information about our other sites:
> >> http://www.techgenix.com
> >> ------------------------------------------------------
> >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> >> Report abuse to listadmin@xxxxxxxxxxxxx
> >>
> >> ------------------------------------------------------
> >> List Archives: //www.freelists.org/archives/isalist/
> >> ISA Server Newsletter: 
> >> http://www.isaserver.org/pages/newsletter.asp
> >> ISA Server Articles and Tutorials:
> >> http://www.isaserver.org/articles_tutorials/
> >> ISA Server Blogs: http://blogs.isaserver.org/
> >> ------------------------------------------------------
> >> Visit TechGenix.com for more information about our other sites:
> >> http://www.techgenix.com
> >> ------------------------------------------------------
> >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> >> Report abuse to listadmin@xxxxxxxxxxxxx
> >>
> >>
> >>
> >
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: