Re: [Full-Disclosure] Possibly a stupid question RPC over HTTP

From: Matthew Farrenkopf (farrenkm_at_ohsu.edu)
Date: 10/13/04

  • Next message: vuln_at_hexview.com: "[Full-Disclosure] [HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss"
    To: full-disclosure@lists.netsys.com
    Date: Wed, 13 Oct 2004 12:41:37 -0700
    
    

    "Daniel H. Renner" <dan@losangelescomputerhelp.com> 10/13/2004 8:37:12
    AM:
    > Daniel,
    >
    > Could you please point out where you read this data? I would like
    to
    > see this one...

    Ye god, it's true. And it's recommended by Microsoft as well. One
    example:

    http://www.microsoft.com/downloads/details.aspx?FamilyID=77B6D819-C7B3-42D1-8FBB-FE6339FFA1ED&displaylang=en

    This is the Exchange Server 2003 deployment guide. Self-extracting
    ZIP. Contains the guide, nothing else.

    Page 154:

    - - - - - 8< - - - - -
    Configuring RPC over HTTP for Outlook 2003

    When you deploy RPC over HTTP in your corporate environment, you have
    two deployment options that are based on where you locate your RPC Proxy
    server:

    * Option 1 (recommended) Deploy an advanced firewall server such as
    Internet Security and Acceleration (ISA) Server in the perimeter
    network, and position your RPC Proxy server within the corporate
    network.

    Note
    When you use ISA Server as your advanced firewall server, you have
    several deployment options. For information about how to install ISA
    Server as an advanced firewall server, see the guide Using Microsoft
    Exchange 2000 Front-End Servers
    (http://go.microsoft.com/fwlink/?linkid=14575).

    * Option 2 Position the Exchange 2003 front-end server acting as an
    RPC Proxy server in the perimeter network.
    - - - - - 8< - - - - -

    Matt

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html


  • Next message: vuln_at_hexview.com: "[Full-Disclosure] [HV-HIGH] RIM Blackberry buffer overflow, DoS, data loss"

    Relevant Pages

    • RPC problems Outlook Anywhere
      ... I have an exchange server that has been up and running for the last 4 months ... I am trying to add a few users to use "outlook anywhere" however I am having ... problems in what I have diagnosed to be RPC proxy problem on server. ... Testing Http Authentication Methods for URL ...
      (microsoft.public.exchange.admin)
    • Problem with RPCoverHTTP and clients under NAT
      ... We have an exchange server 2003 EE, single server configuration, with owa ... and RPC proxy over HTTP. ... problem of dual-naming between the internal network and the internet. ...
      (microsoft.public.exchange.connectivity)
    • RPC over HTTP and clients on a private network
      ... We have an exchange server 2003 EE, single server configuration, with owa ... problem of dual-naming between the internal network and the internet. ... The problem arises when we try to connect to the RPC proxy using an internet ...
      (microsoft.public.exchange.connectivity)
    • Re: RPC over HTTPS unstable connection
      ... The ValidPorts section on the RPC Proxy server is for the RPC/HTTP clients ... You do, however, need to add your Exchange server for port 6004. ... On the RPC proxy server, ...
      (microsoft.public.exchange.admin)
    • Re: RPC over HTTPS unstable connection
      ... The RPC Proxy server is listed ... in Valid Ports because it's also the local Domain controller and Global ... The ValidPorts section on the RPC Proxy server needs to reference the ... also happens to be a Domain Controller and Global Catalog server. ...
      (microsoft.public.exchange.admin)

  • Quantcast