I am using mod_proxy (for some reason, it is called libproxy in my modules list). My configs look exactly like what you suggested. Someone suggested lines for /exchweb and /public, so I have those too. I have a feeling that the problem lies with the Exchange authentication. We have basic authentication turned on in the IIS part of the Exchange server, and when one loads the page through the apache proxy, you get two login prompts. The first refers to the proxy's dns address, but the second refers to the netbios name of the Exchange server. If you have netbios access to the server (on-campus) the second prompt works. If you don't (off-campus) two frames appear in the browser, both claiming that the 'page cannot be displayed'. http://support.microsoft.com/default.aspx?scid=kb;en-us;327843&Product=e xch2003 has directions for fixing this problem, but when we followed these instructions, (off-campus) the first prompt comes up but when I login, no frames and page cannot be displayed; and (on-campus) the prompt includes a domain line, which won't take any domain, not the exchange server's netbios name, not it's FQDN, not our AD domain. -----Original Message----- From: tclug-list-bounces at mn-linux.org [mailto:tclug-list-bounces at mn-linux.org] On Behalf Of Clay Fandre Sent: Friday, April 02, 2004 2:52 PM To: TCLUG Mailing List Subject: Re: [TCLUG] Outlook Web Access 2003, Apache, libproxy, mod_ssl So what isn't working? Are you using mod_proxy? What do your configs look like? You can easily limit access to just the exchange part of the web server. ProxyPass /exchange https://exchange.mydomain.com/exchange ProxyPassReverse /exchange https://exchange.mydomain.com/exchange On Fri, 02 Apr 2004, Steve Robrahn wrote: > Has anyone reading this ever set up an Apache to reverse proxy Outlook > Web Access 2003 to the Internet? Would you be willing to help me keep > an IIS server from seeing the Internet? I'm so close, I just need a > little help to make all of the pieces fall together. > > Currently, our school has no IIS servers exposed to the Internet, and > my co-workers and I desperately want to keep it that way. But we just > implemented an Exchange 2003 server and mgmnt wants to use Outlook Web > Access 2003 to let users access Exchange from home. I've searched the > depths of Google, and many admins have posted different views on using > Apache to reverse-proxy OWA safely to the Internet. This is my goal. > It seems like most of the posts have a few of the steps but not all. > I think I have Apache configured correctly to proxy it, but it seems > like there's something I'm missing, and I don't know what to do next. > > My experience level: running Debian unstable as primary machine at > home for 2.5 years, Red Hat dual-boot since '99 before switching to > Debian in Jan 2001. Admin - mostly Debian Stable running 4 BIND9 > servers (2 of which are serving our Active Directory dns), 1 Exim mail > relay, 3 Smoothwall firewalls, 2 Shorewall firewalls, and 1 Apache web server. > > Steven Robrahn > North Central University > Information Technology Department > PC Fleet Manager > 612.860.5412/sdrobrah at northcentral.edu > > _______________________________________________ > TCLUG Mailing List - Minneapolis/St. Paul, Minnesota > http://www.mn-linux.org tclug-list at mn-linux.org > https://mailman.real-time.com/mailman/listinfo/tclug-list > -- Clay Fandre email: clay at fandre.com PGP Key ID: 0x50DBBB60 _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list