http://www.ISAserver.org ------------------------------------------------------- Me, too, scripting wise. When you "Check Name" to resolve the IP address, it resolves to the internal name (delta.afsc.local), which puts me back to square one. Oh, well. Rob -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of John T (Lists) Sent: Friday, April 14, 2006 2:29 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Supporting RPC Outlook Clients http://www.ISAserver.org ------------------------------------------------------- As for scripting editing of the HOSTS file, I have no idea since I am extremely poor on scripting. As for the external client, why not put the Public IP address associated with the address you are trying to script directly into Outlook? John T eServices For You "Seek, and ye shall find!" > -----Original Message----- > From: isalist-bounce@xxxxxxxxxxxxx > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of > Rob Moore > Sent: Friday, April 14, 2006 11:14 AM > To: isalist@xxxxxxxxxxxxx > Subject: [isalist] Re: Supporting RPC Outlook Clients > > http://www.ISAserver.org > ------------------------------------------------------- > > How does that benefit a client that's never seen the inside of our > network, and is not VPN'd into our network? Unless I'm mistaken, > modifying the internal DNS of our internal network won't help that > client. Hence the Hosts file. And in fact our internal network does > have entries in the .org zone for mail.afsc.org, delta.afsc.org, and > (of > course) delta.afsc.local in the .local zone. > > Rob > > -----Original Message----- > From: isalist-bounce@xxxxxxxxxxxxx > [mailto:isalist-bounce@xxxxxxxxxxxxx] > On Behalf Of Thor (Hammer of God) > Sent: Friday, April 14, 2006 1:09 PM > To: isalist@xxxxxxxxxxxxx > Subject: [isalist] Re: Supporting RPC Outlook Clients > > http://www.ISAserver.org > ------------------------------------------------------- > > Whatever entry you would put in the hosts file... Just put it in DNS > instead. Am I missing something here? > > t > > > On 4/14/06 9:34 AM, "Rob Moore" <RMoore@xxxxxxxx> spoketh to all: > > > http://www.ISAserver.org > > ------------------------------------------------------- > > > > We actually do have a real split DNS, with a .org zone. We use it > > for a few DNS entries. What would I need to put into it to make this work? > > It's got an entry for mail.afsc.org that points to the internal > > address, as well as an entry for delta.afsc.org (the name of our > > Exchange server is delta.afsc.local) that also points to the > > internal > address. > > > > Rob > > > > -----Original Message----- > > From: isalist-bounce@xxxxxxxxxxxxx > > [mailto:isalist-bounce@xxxxxxxxxxxxx] > > On Behalf Of Thor (Hammer of God) > > Sent: Friday, April 14, 2006 12:26 PM > > To: isalist@xxxxxxxxxxxxx > > Subject: [isalist] Re: Supporting RPC Outlook Clients > > > > http://www.ISAserver.org > > ------------------------------------------------------- > > > > Why not just create a new zone for your .org in AD and skip the > > whole hosts thing?? > > > > > > On 4/14/06 9:22 AM, "Rob Moore" <RMoore@xxxxxxxx> spoketh to all: > > > >> http://www.ISAserver.org > >> ------------------------------------------------------- > >> > >> Getting which to work? Here's the URL (posted in my original > >> question) > > > >> for getting the RPC over HTTP to work: > >> http://www.isaserver.org/articles/2004securerpc.html. It does work. > >> > >> My question is about editing the Hosts file via a script, so I > >> don't have to instruct my users how to do it themselves (or where > >> to put a pre-modified one). What I'd like to be able to do is give > >> them a script and say, "Here, double-click this" and have the > >> script make the > > > >> appropriate addition to the Hosts file. > >> > >> Thanks, > >> Rob > >> > >> -----Original Message----- > >> From: isalist-bounce@xxxxxxxxxxxxx > >> [mailto:isalist-bounce@xxxxxxxxxxxxx] > >> On Behalf Of Andrew English > >> Sent: Friday, April 14, 2006 12:26 PM > >> To: isalist@xxxxxxxxxxxxx > >> Subject: [isalist] Re: Supporting RPC Outlook Clients > >> > >> http://www.ISAserver.org > >> ------------------------------------------------------- > >> > >> Uhm, > >> > >> With all that said and done how about posting the URL of the > >> tutorial > > >> that Tom wrote (I think) on getting it to work? > >> > >> Andrew > >> > >> > >> -----Original Message----- > >> From: isalist-bounce@xxxxxxxxxxxxx > >> [mailto:isalist-bounce@xxxxxxxxxxxxx] > >> On Behalf Of Jim Harrison > >> Sent: Friday, April 14, 2006 10:10 AM > >> To: isalist@xxxxxxxxxxxxx > >> Subject: [isalist] Re: Supporting RPC Outlook Clients > >> > >> http://www.ISAserver.org > >> ------------------------------------------------------- > >> > >> Oops. > >> Read it inside-out - I understood it as RPC/HTTP - you're actually > >> using MAPI. > >> > >> The problem is that the OL clients are going to look for ".local" > >> because that's the domain where the Exch server lives. As such, > >> you have to give them this hosts file setting. > >> This is one of the main reasons Tom (and I) dislike the ".local" > >> domain construct. > >> > >> You can use a logon script to modify the hosts file. > >> > >> -----Original Message----- > >> From: isalist-bounce@xxxxxxxxxxxxx > >> [mailto:isalist-bounce@xxxxxxxxxxxxx] > >> On Behalf Of Rob Moore > >> Sent: Friday, April 14, 2006 6:51 AM > >> To: isalist@xxxxxxxxxxxxx > >> Subject: [isalist] Re: Supporting RPC Outlook Clients > >> > >> http://www.ISAserver.org > >> ------------------------------------------------------- > >> > >> I'm not finding anything along those lines in the article by Tom. > >> Where can I find that? > >> > >> Thanks, > >> Rob > >> > >> -----Original Message----- > >> From: isalist-bounce@xxxxxxxxxxxxx > >> [mailto:isalist-bounce@xxxxxxxxxxxxx] > >> On Behalf Of Jim Harrison > >> Sent: Friday, April 14, 2006 9:32 AM > >> To: isalist@xxxxxxxxxxxxx > >> Subject: [isalist] Re: Supporting RPC Outlook Clients > >> > >> http://www.ISAserver.org > >> ------------------------------------------------------- > >> > >> What did you enter in the "Use this URL..." field? > >> > >> -----Original Message----- > >> From: isalist-bounce@xxxxxxxxxxxxx > >> [mailto:isalist-bounce@xxxxxxxxxxxxx] > >> On Behalf Of Rob Moore > >> Sent: Friday, April 14, 2006 5:55 AM > >> To: isalist@xxxxxxxxxxxxx > >> Subject: [isalist] Supporting RPC Outlook Clients > >> > >> Using: ISA 2004 Standard, Server 2003, Outlook 2003. > >> > >> I've finally gotten around to implementing RPC over HTTP for my > >> Outlook clients. We have a split DNS, with our internal DNS names > >> ending in ".local". > >> > >> I've gotten an external client to connect, but only if I add the > >> Exchange server's external IP address and internal name to the > >> Hosts file on the external PC (as described in Tom's article > >> http://www.isaserver.org/articles/2004securerpc.html > >> <http://www.isaserver.org/articles/2004securerpc.html> ). When I > >> configure the client, I put in "mail.afsc.org"--the public name of > >> our > > > >> Exchange server--as the server name. When it resolves, it resolves > >> to > > >> "delta.afsc.local"--the internal name of our Exchange server. This > >> resolution works, even without the addition to the Hosts file. > >> However, without the addition to the Hosts file, the client can't > >> actually connect to "delta.afsc.local". > >> > >> So, these are my questions: > >> 1. Is there a way around using the Hosts file? > >> 2. If not, can someone tell me how to script the necessary info > >> into the Hosts file? (I'm not much of a scripter, and I'd like to > >> avoid giving my fairly non-technical users instructions for editing > >> it > >> themselves.) > >> > >> Alternatively, I suppose I could create the necessary Hosts > >> file and give that to them. But there are a couple of problems with > > that: > >> first, our non-techie users would likely put it in the wrong place; > >> second, I've found that our anti-spyware program also uses the > >> Hosts file, and I don't want to mess that up. > >> > >> I can't use AD to make the changes to the Hosts file > >> because many of the computers that need the change are personal > >> computers that > > > >> are not members of our domain. > >> > >> Thanks, > >> Rob > >> > >> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= > >> Rob Moore > >> Network Manager > >> 215-241-7870 > >> Help Desk: 800-500-AFSC > >> > >> > >> All mail to and from this domain is GFI-scanned. > >> > >> ------------------------------------------------------ > >> List Archives: //www.freelists.org/archives/isalist/ > >> ISA Server Newsletter: > >> http://www.isaserver.org/pages/newsletter.asp > >> ISA Server Articles and Tutorials: > >> http://www.isaserver.org/articles_tutorials/ > >> ISA Server Blogs: http://blogs.isaserver.org/ > >> ------------------------------------------------------ > >> Visit TechGenix.com for more information about our other sites: > >> http://www.techgenix.com > >> ------------------------------------------------------ > >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > >> Report abuse to listadmin@xxxxxxxxxxxxx > >> > >> ------------------------------------------------------ > >> List Archives: //www.freelists.org/archives/isalist/ > >> ISA Server Newsletter: > >> http://www.isaserver.org/pages/newsletter.asp > >> ISA Server Articles and Tutorials: > >> http://www.isaserver.org/articles_tutorials/ > >> ISA Server Blogs: http://blogs.isaserver.org/ > >> ------------------------------------------------------ > >> Visit TechGenix.com for more information about our other sites: > >> http://www.techgenix.com > >> ------------------------------------------------------ > >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > >> Report abuse to listadmin@xxxxxxxxxxxxx > >> > >> > >> All mail to and from this domain is GFI-scanned. > >> > >> ------------------------------------------------------ > >> List Archives: //www.freelists.org/archives/isalist/ > >> ISA Server Newsletter: > >> http://www.isaserver.org/pages/newsletter.asp > >> ISA Server Articles and Tutorials: > >> http://www.isaserver.org/articles_tutorials/ > >> ISA Server Blogs: http://blogs.isaserver.org/ > >> ------------------------------------------------------ > >> Visit TechGenix.com for more information about our other sites: > >> http://www.techgenix.com > >> ------------------------------------------------------ > >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > >> Report abuse to listadmin@xxxxxxxxxxxxx > >> > >> ------------------------------------------------------ > >> List Archives: //www.freelists.org/archives/isalist/ > >> ISA Server Newsletter: > >> http://www.isaserver.org/pages/newsletter.asp > >> ISA Server Articles and Tutorials: > >> http://www.isaserver.org/articles_tutorials/ > >> ISA Server Blogs: http://blogs.isaserver.org/ > >> ------------------------------------------------------ > >> Visit TechGenix.com for more information about our other sites: > >> http://www.techgenix.com > >> ------------------------------------------------------ > >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > >> Report abuse to listadmin@xxxxxxxxxxxxx > >> > >> ------------------------------------------------------ > >> List Archives: //www.freelists.org/archives/isalist/ > >> ISA Server Newsletter: > >> http://www.isaserver.org/pages/newsletter.asp > >> ISA Server Articles and Tutorials: > >> http://www.isaserver.org/articles_tutorials/ > >> ISA Server Blogs: http://blogs.isaserver.org/ > >> ------------------------------------------------------ > >> Visit TechGenix.com for more information about our other sites: > >> http://www.techgenix.com > >> ------------------------------------------------------ > >> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > >> Report abuse to listadmin@xxxxxxxxxxxxx > >> > >> > >> > > > > > > ------------------------------------------------------ > > List Archives: //www.freelists.org/archives/isalist/ > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server Articles and Tutorials: > > http://www.isaserver.org/articles_tutorials/ > > ISA Server Blogs: http://blogs.isaserver.org/ > > ------------------------------------------------------ > > Visit TechGenix.com for more information about our other sites: > > http://www.techgenix.com > > ------------------------------------------------------ > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > > Report abuse to listadmin@xxxxxxxxxxxxx > > > > ------------------------------------------------------ > > List Archives: //www.freelists.org/archives/isalist/ > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server Articles and Tutorials: > > http://www.isaserver.org/articles_tutorials/ > > ISA Server Blogs: http://blogs.isaserver.org/ > > ------------------------------------------------------ > > Visit TechGenix.com for more information about our other sites: > > http://www.techgenix.com > > ------------------------------------------------------ > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > > Report abuse to listadmin@xxxxxxxxxxxxx > > > > > > > > > ------------------------------------------------------ > List Archives: //www.freelists.org/archives/isalist/ > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server Articles and Tutorials: > http://www.isaserver.org/articles_tutorials/ > ISA Server Blogs: http://blogs.isaserver.org/ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > Report abuse to listadmin@xxxxxxxxxxxxx > > ------------------------------------------------------ > List Archives: //www.freelists.org/archives/isalist/ > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ > ISA Server Blogs: http://blogs.isaserver.org/ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx