M$ Exchange at the back of Wingate

[waikiki]

Hi,

Does anybody tried this configuration.
I have a Wingate as our firewall.
On the wingate machine I have another email server running which uses https.
I installed exchange 2003 on one of my machine inside my network. I want to test the exchange 2003 machine inside my network using Outlook Web Access without shutting down the mail server on my wingate machine.
I tried the port redirect but it doesnt seem to work. My exchange 2003 OWA is using SSL.

Can anybody advise what I should do to make it work?

Thanks in advance for your help!

[logan]

If you just want to test Microsoft Exchange web access, you should only need to redirect port 443 from WinGate to the Microsoft Exchange server. I have included details on the best way to do this below.


1. GateKeeper -> WinGate -> System -> Extended Networking -> Port Security

2. Click Add

3. Enter a description (e.g. Exchange Web Access)

4. Select "Internet computers to the WinGate PC" and "TCP"

5. Enter the port range "443" to "443"

6. Select "Redirect Packet to IP address"

7. Enter the IP address of the Microsoft Exchange server

8. Select "Don't translate source IP"
(This is important when redirecting Internet connections to computers on the local network)

9. Click OK, then OK to finalise the change


Now when you try accessing your public IP address on port 443, WinGate will redirect that incoming connection to the Exchange server. If your Internet router has a built in firewall, make sure port 443 is redirected to the WinGate computer, and make sure there are no third-party firewall's installed on the WinGate computer.

[waikiki]

Logan,

thanks for your quick response.
i thought of that solution. however, as mentioned i have another email server running on my wingate machine which is also using port 443. as much as possible i dont want to disturb the operation of that mail server since that is the live server we are using. what i did was i configured the exchange server not to use SSL and instead just use the basic authentication then set the port number as 8080. it is working when i access it inside my network it work good. but when i followed the steps you gave with changing the port number from 443 to 8080 it doesnt seem to work.

please advise.

thanks!

[logan]

How is WinGate connected to the internet? Is it connected directly, or does it connect through a NAT router?

[waikiki]

it is connected directly to the internet... no nat router in front of wingate

[logan]

So there's no port forwarding to worry about from an upstream source. Does the MS exchange server allow connections from public IP addresses. What happens if you turn off the "Don't translate source IP" option so that incoming connections are masked with the WinGate computers IP address?

[waikiki]

Logan got to work without SSL. i left the "Don't translate source IP" option "ON" and used port 8080 and it worked. my problem now is using port 443 without disturbing the main server with wingate. do you have any suggestions?

thanks!

[logan]

If your current server is using port 443, then you can't use port 443 for ms exchange. Two services cannot reside on the same port number.

[waikiki]

what about if i change the port number would that work for SSL?

[logan]

yes, that should be fine, but will be a setting that you have to change in Exchange, not WinGate.

[waikiki]

thanks logan for your help.

appreciate your help on this one