stippi
Goto Top

Kein Zugriff auf OWA bei SBS 2003 RC2

Hallo, folgende situation:
SBS 2003 RC2
ISA 2004
Exchange 2003

Läuft alles an sich ohne Probleme, nun möchte ich jedoch gerne den Exchange per OWA von aussen erreichbar machen. Es lief eine zeitlang, nur plötzlich nicht mehr und ich bin mit meinem Latein am Ende. Habe auch kräftig die Suche bemüht, doch eine Lösung meines Problems erreichte ich leider nicht.
Nun bin ich erstmal auf einen 0-Punkt angelangt und hoffe auf eure Hilfe.

Ich bin mittlerweile etwas verwirrt. Habe ich es doch damals geschafft mittels Assistent für Internet und Email Einrichtung das OWA zum laufen zu bekommen. Jetzt bricht dieser Assistent bei der Konfiguration der Firewall ab, merkwürdigerweise. Ich kann mit OK zwar bestätigen aber der Punkt Firewallkonfiguration bleibt mit einem roten X markiert.
Sofern ich eine Regel in dem ISA erstelle in der ich die OWA freigeben und von aussen erreichbar machen möchte, wird mir auch angezeigt das es sich um ein nicht authentifiziertes Zertifikat handelt, bestätige ich dies kommt Fehler 500 oder ähnliches. Ein Zugriff auf den Exchange also nicht möglich.
Ich habe mittlerweile alles mögliche an OWA Einstellungen gelöscht was ich meiner Meinung nach getätigt habe, ausserdem denke ich das die Zertifkatgeschichte mir Probleme bereitet.
Wir würden gern einfach ein selbsterstelltes Zertifikat nutzen, ein gekauftes würde sich bei uns einfach nicht lohnen.

Für Tipps, Anregungen und eventuelle Hilfestellungen wäre ich sehr sehr dankbar.

Wünsche euch ein schönes Wochenende.

Viele Grüße

Content-Key: 123717

Url: https://administrator.de/contentid/123717

Printed on: April 19, 2024 at 21:04 o'clock

Member: Stephan.Betken
Stephan.Betken Aug 28, 2009 at 18:32:04 (UTC)
Goto Top
Wie lautet die Fehlermeldung im Ereignisprotokoll? Was steht in der ICWLOG.TXT?.

Die Authentifizierung zwischen ISA und Exchange muss auch passen? Wenn du dir nicht sicher bist, ob du wirklich aller wieder richtig eingestellt hast, dann leg die Verzeichnisse im IIS neu an, http://www.msexchange.org/tutorials/Resetting-OWA-Folder-IIS-security-p ...

Da es mittlerweile Zertifikate schon ab ca. 30 € im jahr gibt lohnt sich sowas immer! Für das selbsterstellte musst du im Assistenten für Internet und E-Mail auswählen, dass ein neues Zertifikat erstellt werden soll. Aber da er gerade nicht richtig will.....

Reich mal bitte die Fehlermeldungen nach.

EDIT: Schau vorher mal unter http://msmvps.com/blogs/bradley/archive/2005/08/08/62004.aspx, ob das vielleicht zutrifft.
Member: Stippi
Stippi Aug 31, 2009 at 08:06:38 (UTC)
Goto Top
Vielen dank für deine Antwort.

Ich habe den Guide mal befolgt und die Ordner neu anlegen lassen. Kurzzeitig konnte ich das OWA intern auch erreichen, nachdem ich aber die ISA Regel erstellt habe und es austesten wollte ob ich es von aussen erreichen kann, war es vorbei. Die normale Standart-Willkommens-Seite zeigt er mir an, sobald ich /exchange dahinter setze habe ich keine chance mehr.

Hier mal ein Auszug von der heute aktualisierten ICWLOG.TXT:
31.08.2009 10:02
Firewall Rule: SBS DHCP Client
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS HTTP 80 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 20 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 20 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS POP3 110 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NTP 123 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS DnsLookupPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS IcmpPingQueryPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS IdentdPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS TS 3389 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS TS 3389 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS PptpReceivePredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS PptpCallPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 21 In CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS FTP 21 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS SMTP 25 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS SmtpPredefinedType
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NNTP 119 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS Remote Web Workplace CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: SBS NTP 123 Out CustomFilter
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business RPC over HTTP Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Business Card Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business CompanyWeb Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business TSWEB Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business RUP Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Monitoring Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business OMA Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business OWA Web Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Web Publishing Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server All Users Protocol Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Internet Access Protocol Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Internet Access Protocol Rule 2
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server Internet Access Site and Content Rule
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server Internet Access Site and Content Rule 2
Cannot find the firewall rule, ignoring the error
Firewall Rule: Small Business Server All Users Site and Content Rule
Cannot find the firewall rule, ignoring the error
Call to Removing ISA2k related firewall rules () returned ok.
Custom protocol name: SBS FTP 20 In CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS FTP 20 Out CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS NTP 123 Out CustomFilter
Cannot find the custom protocol, ignoring the error
Custom protocol name: SBS Remote Web Workplace CustomFilter
Cannot find the custom protocol, ignoring the error
Call to Removing ISA2k related custom protocols () returned ok.
Call to Removing inbound access rule allowing anybody in () returned ok.
Call to Removing inbound access rule allowing anybody out () returned ok.
CStingrayCommit::CommitPortMappings
CStringray::RemoveAllSpecialRules
Call to Resetting the rule enumeration () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS RWW Inbound Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS FTP Outbound Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS RDP Outbound Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS Smtp Server Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS POP3 Outbound Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to Getting the special rule info () returned ok.
Removing the access rule SBS Localhost Dhcp Access Rule
Call to Removing the access rule () returned ok.
Call to MoveToNextSpecialRule () returned ok.
Call to CStringray::RemoveAllSpecialRules () returned ok.
Call to Removing all special firewall rules () returned ok.
CStingrayCommit::CreateStandardPortMappings
Call to Enabling the DHCP system policy () returned ok.
Call to Enabling the CRL download system policy () returned ok.
Call to Creating the DHCP access rule () returned ok.
Call to Disabling ICMP () returned ok.
Call to CStingrayCommit::CreateStandardPortMappings () returned ok.
Call to Creating the standard filters () returned ok.
CStingrayCommit::CreatePortMappingsFromXML
Call to Resetting the port mapping list () returned ok.
Call to Getting the number of port mappings () returned ok.
Number of port mappings 5
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Call to Creating the outbound SMTP access rule () returned ok.
Call to Creating the outbound POP3 access rule () returned ok.
Call to Creating the outbound NNTP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Creating access rule SBS Smtp Server Access Rule TCP 25 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Skipping the port mapping for Port 1723
Call to Creating the outbound PPTP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Call to Creating outbound PPTP access rule () returned ok.
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Call to Creating the outbound RDP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Creating access rule SBS RDP Server Access Rule TCP 3389 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Call to Creating the outbound FTP access rule () returned ok.
Call to Handling predefined port mapping () returned ok.
Creating access rule SBS FTP Server Access Rule TCP 21 returned 0
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Skipping the port mapping for Port 80
Call to CStingrayCommit::CreatePortMappingsFromXML () returned ok.
Call to Creating predefined port mappings () returned ok.
CStingrayCommit::CreatePortMappingsFromXML
Call to Resetting the port mapping list () returned ok.
Call to Getting the number of port mappings () returned ok.
Number of port mappings 1
Call to Getting the next port mapping () returned ok.
Call to Reading Port () returned ok.
Call to Reading Protocol () returned ok.
Call to Reading Direction () returned ok.
Call to Validating TCP direction () returned ok.
Call to Reading Enable () returned ok.
Call to Getting the name for the predefined port mapping for RWW () returned ok.
Call to Creating tcp port mapping protocol () returned ok.
Creating access rule SBS RWW Inbound Access Rule TCP 4125 returned 0
Call to CStingrayCommit::CreatePortMappingsFromXML () returned ok.
Call to Creating custom port mappings () returned ok.
Call to CStingrayCommit::CommitPortMappings () returned ok.
Call to Creating port mappings () returned ok.
CStingrayCommit::CommitWebPublishingRules
Call to Removing all sbs web publishing rules () returned ok.
RUP is published
Call to Fixing the inheritance for default web site () returned ok.
Call to Unpublishing the default web site () returned ok.
Call to Fixing the inheritance for companyweb dir () returned ok.
Call to Unpublishing companyweb () returned ok.
Call to Publishing root () returned ok.
Call to Publishing /Exchange () returned ok.
Call to Publishing /ExchWeb () returned ok.
Call to Publishing /Public () returned ok.
Call to Publishing /ExAdmin () returned ok.
Call to Publishing RUP () returned ok.
Call to Publishing client help for RUP () returned ok.
Call to Publishing Monitoring () returned ok.
Call to Publishing OMA () returned ok.
Call to Publishing ActiveSync () returned ok.
Call to Publishing RPC over HTTP () returned ok.
Call to Configuring RPC over HTTP () returned ok.
Call to Publishing Companyweb () returned ok.
CStingrayCommit::CreateWebPublishingRules
Call to Reading publishing server name () returned ok.
Call to Creating A record for publishing () returned ok.
Call to Checking the existence of the SBS listener () returned ok.
Call to Reading the Internet Server Name () returned ok.
Internet Server Name: hpma.dyndns.org
Error 0xc004035b returned from call to Recreating the SBS web listener().
Error 0xc004035b returned from call to CStingrayCommit::CreateWebPublishingRules().
Error 0xc004035b returned from call to Creating ISA2k4 Web publishing rules().
Error 0xc004035b returned from call to CStingrayCommit::CommitWebPublishingRules().
Error 0xc004035b returned from call to Creating Web publishing rules().
Error 0xc004035b returned from call to CStingrayCommit::CommitEx().
calling GetBOConnector ().
Call to GetBOConnector () returned ok.
calling spADs->PutEx (ADS_PROPERTY_CLEAR, msExchSmtpOutboundSecurityPassword).
Call to spADs->PutEx () returned ok.
calling spADs->SetInfo ().
Call to spADs->SetInfo () returned ok.

Ich hoffe du verstehst da mehr draus als ich face-wink

Das mit dem Zertifikat ist schon angedacht, nur wollten wir das erst mal so laufen lassen bis wir komplett umstellen.

Der andere Link traf leider auf meine Fehler nicht wirklich zu bzw ich hab da nicht ganz durchgeblickt.

Vielen dank für deine (weitere) Hilfe!

Grüße