IIS Server Security - Exchange 2003 OWA and IIS over SSL

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > July 2005 > Exchange 2003 OWA and IIS over SSL





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Exchange 2003 OWA and IIS over SSL
chuy

2005-07-11, 8:48 pm

I have setup Exchange 2003 OWA to run over SSL and everything is working
great. My questions is more apart of domain forwarding or redirecting.
Basically this is the situation.

When my users type in http://www.mydomain.com they should be able to get my
website. I would like to set it up where if they type in
http://mail.mydomain.com they would be redirected to
https://mail.mydomain.com/exchange while not affecting the
http://www.mydomain.com. What is the best way to acheive this. Any help
appreciated.

-Chuy
David Wang [Msft]

2005-07-12, 2:48 am

I presume that www.mydomain.com is a different logical IIS website from
mail.mydomain.com . If so, then try:
1. Select the OWA website that answers to https://mail.mydomain.com and
perform the following three configuration steps --
2. Add a new HTTP ServerBinding that answers to host header of
mail.mydomain.com
3. Configure IIS to REQUIRE SSL
4. Configure 403.4 Custom Error to send a 302 redirection to
https://mail.mydomain.com

For #4, see: http://support.microsoft.com/defaul...kb;en-us;555126


What you've basically done is set up a website that answers to
http://mail.mydomain.com as well as https://mail.mydomain.com . However,
when the user types in http://mail.mydomain.com, IIS requires SSL and will
send the 403.4 custom error instead. The custom error is changed to send a
302 redirect to the client to go to https://mail.mydomain.com , thus
completing the redirection that you want ONLY for HTTP requests to
mail.mydomain.com.

Since www.mydomain.com and mail.mydomain.com are separate IIS websites, the
"require SSL" only applies to mail.mydomain.com and NOT www.mydomain.com

--
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"chuy" <chuy@discussions.microsoft.com> wrote in message
news:825C13C8-A1A2-4AAB-9C76-48C77749D235@microsoft.com...
I have setup Exchange 2003 OWA to run over SSL and everything is working
great. My questions is more apart of domain forwarding or redirecting.
Basically this is the situation.

When my users type in http://www.mydomain.com they should be able to get my
website. I would like to set it up where if they type in
http://mail.mydomain.com they would be redirected to
https://mail.mydomain.com/exchange while not affecting the
http://www.mydomain.com. What is the best way to acheive this. Any help
appreciated.

-Chuy


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com