[isalist] Re: Those kicks just keep getting harder to find
- From: "Thor (Hammer of God)" <thor@xxxxxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Thu, 28 Jun 2007 09:43:07 -0700
http://www.ISAserver.org
-------------------------------------------------------
The RPCProxy default ports are 100-500 or some such on the Ex box.
That's fine for internal use of RPC/HTTP as it will work without changes
via RPC endpoint lookup, but if you publish via ISA, when ISA talks to
the RPCProxy, it uses 6001-6002 and 6004.
If you do not change the ValidPorts config in the RPDProxy key, your ISA
pub rule will fail. That's the facts Jack!
t
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Thursday, June 28, 2007 9:24 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Those kicks just keep getting harder to find
http://www.ISAserver.org
-------------------------------------------------------
What ISA edits you be maky?
ISA no care what ports happen between RPCProxy & Exchange - all happen
behind ISA.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thor (Hammer of God)
Sent: Thursday, June 28, 2007 9:14 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Those kicks just keep getting harder to find
http://www.ISAserver.org
-------------------------------------------------------
The publisher to Exchange only usey those portie. If you no makey edits
for ISA, it no workie.
t
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Thursday, June 28, 2007 9:06 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Those kicks just keep getting harder to find
http://www.ISAserver.org
-------------------------------------------------------
Er - "..via ISA, which only uses those RPC ports.."?
ISA no be control those ports for RPC/HTTP.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thor (Hammer of God)
Sent: Thursday, June 28, 2007 8:47 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Those kicks just keep getting harder to find
You also might be asking yourself "Hey Self, why did the Exchange Team
not include the 6000-6004 RPC port range by default in Ex2k3 when they
know that the only way people would deploy RPC/HTTP over the Internet is
via ISA, which only uses those RPC ports." Because it's more fun to
make the admin edit the registry while telling them "if you edit the
registry, we are not responsible for your system anymore" particularly
when that's they only possible way it can work!
t
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Sent: Thursday, June 28, 2007 8:09 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Those kicks just keep getting harder to find
"You might be asking yourself "Hey Tom, why did you enable RPC/HTTP in
the Exchange Server configuration when you haven't installed the
RPC/HTTP Proxy service yet?" The reason why I did it this way was to
show off the Exchange development team's sense of humor. Sure, they
could have configured things so that when you enable Outlook Anywhere it
would check to see if the RPC/HTTP Proxy service was installed, but it's
a lot more fun for them to think about you trying to troubleshoot for a
few days why RPC/HTTP isn't working. You'd think they'd get enough
jollies by making you use PowerHell for the certificate request and
assignment."
:\
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
