Re: Website inside or outside domain

The one time I implemented OWA, I wrestled long and hard with how to minimize the security risks while giving the users the convenience of accessing their email via the www. I came across a rather unique solution which worked well in my environment.

Instead of dishing out more cash for ISA, I used a redhat Linux 7.x PII PC in the DMZ with about 128-MB RAM to act as proxy (using apache's mod_proxy) to the IIS OWA website. The IIS OWA website was on the LAN and it in turn talked to the exchange server on the LAN. Having the Linux box also allowed the additional advantage of adding SSL (using apache mod_ssl) to the data stream between the end user and the Linux box itself. The firewall was then configured to only allow traffic between the Apache and IIS box. I also had to modify some of the asp code that comes with OWA to make this work.

KEITH KOOYMAN wrote:

> As I have followed this thread I have noticed that no one has addressed the
Received on Thu Feb 13 16:49:59 2003