Comments on: Apache ReverseProxy for OWA http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/ Ramblings of a Utah System Administrator Thu, 26 Aug 2010 16:31:42 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Kevin Pendleton http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/comment-page-1/#comment-313 Kevin Pendleton Thu, 26 Aug 2010 16:31:42 +0000 http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/#comment-313 No problem, good luck! No problem, good luck!

]]> By: Mike http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/comment-page-1/#comment-312 Mike Thu, 26 Aug 2010 16:22:55 +0000 http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/#comment-312 Awesome. thanks a bunch for this post and your help. I have been struggling with our reverse proxy for a while now, but am close to finishing it up now. This helped a lot! Awesome. thanks a bunch for this post and your help. I have been struggling with our reverse proxy for a while now, but am close to finishing it up now. This helped a lot!

]]> By: Mike http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/comment-page-1/#comment-311 Mike Thu, 26 Aug 2010 16:21:39 +0000 http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/#comment-311 oops. the blog dropped some of my text, I meant to say why is it not configured as a Location... oops. the blog dropped some of my text, I meant to say why is it not configured as a Location…

]]> By: Kevin Pendleton http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/comment-page-1/#comment-310 Kevin Pendleton Thu, 26 Aug 2010 16:03:22 +0000 http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/#comment-310 Sorry, Mike, I should have thought about this when you asked your last question, but I did move all of this to Apache 2.2 over a year ago and /owa is in a Location tag now. We do SSL offloading on the load balancers and have moved all the Blackberry devices to a BES server, so here is the full webmail (OWA) config: <pre><code><VirtualHost *:80> ServerName webmail.domain.com DocumentRoot /data/sites/webmail ErrorLog logs/webmail_error_log CustomLog logs/webmail_access_log combined SSLProxyEngine on RequestHeader set Front-End-Https "On" RedirectMatch permanent /$ https://webmail.domain.com/owa/ RedirectMatch permanent /owa$ https://webmail.domain.com/owa/ # Need to allow activesync pings for push technology # Set to 15 minutes ProxyTimeout 900 # Needed for smartphones <Location /Microsoft-Server-ActiveSync> ProxyPass https://internalserveraddress/Microsoft-Server-ActiveSync ProxyPassReverse https://internalserveraddress/Microsoft-Server-ActiveSync </Location> # Actual Proxy for OWA (web browser based mail) <Location /owa> ProxyPass https://internalserveraddress/owa ProxyPassReverse https://internalserveraddress/owa </Location> </VirtualHost></code></pre> Sorry, Mike, I should have thought about this when you asked your last question, but I did move all of this to Apache 2.2 over a year ago and /owa is in a Location tag now. We do SSL offloading on the load balancers and have moved all the Blackberry devices to a BES server, so here is the full webmail (OWA) config:

<VirtualHost *:80>
        ServerName      webmail.domain.com

        DocumentRoot /data/sites/webmail
        ErrorLog logs/webmail_error_log
        CustomLog logs/webmail_access_log combined

        SSLProxyEngine on
        RequestHeader set Front-End-Https "On"

        RedirectMatch permanent /$ https://webmail.domain.com/owa/
        RedirectMatch permanent /owa$ https://webmail.domain.com/owa/

        # Need to allow activesync pings for push technology
        # Set to 15 minutes
        ProxyTimeout 900

        # Needed for smartphones
        <Location /Microsoft-Server-ActiveSync>
        ProxyPass https://internalserveraddress/Microsoft-Server-ActiveSync
        ProxyPassReverse https://internalserveraddress/Microsoft-Server-ActiveSync
        </Location>

        # Actual Proxy for OWA (web browser based mail)
        <Location /owa>
        ProxyPass https://internalserveraddress/owa
        ProxyPassReverse https://internalserveraddress/owa
        </Location>
</VirtualHost>
]]> By: Mike http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/comment-page-1/#comment-309 Mike Thu, 26 Aug 2010 15:44:38 +0000 http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/#comment-309 Kevin- one other question. Do you remember why /owa is not configured as a <Location /owa>? Does it make any difference if you set it up as a location, or leave it on it's own as you have here? Kevin- one other question. Do you remember why /owa is not configured as a <Location /owa>? Does it make any difference if you set it up as a location, or leave it on it’s own as you have here?

]]> By: Kevin Pendleton http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/comment-page-1/#comment-307 Kevin Pendleton Thu, 19 Aug 2010 15:04:32 +0000 http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/#comment-307 Mike - I think this was built for Apache 2.0, but should work fine for 2.2 as well. Mike – I think this was built for Apache 2.0, but should work fine for 2.2 as well.

]]> By: Mike http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/comment-page-1/#comment-306 Mike Wed, 18 Aug 2010 14:54:57 +0000 http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/#comment-306 @Timothy Oefelein- Not sure if you are still struggling with your BlackBerry setup, but this is good to know for anyone reading this. You can get BlackBerry Enterprise Server Express for free now. It's a much better setup, it gives you a lot more control over the devices than using BIS. There are some limitations in the free version but it's well worth the time to set it up. @Timothy Oefelein-
Not sure if you are still struggling with your BlackBerry setup, but this is good to know for anyone reading this. You can get BlackBerry Enterprise Server Express for free now. It’s a much better setup, it gives you a lot more control over the devices than using BIS. There are some limitations in the free version but it’s well worth the time to set it up.

]]> By: Mike http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/comment-page-1/#comment-305 Mike Tue, 17 Aug 2010 22:24:37 +0000 http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/#comment-305 Kevin- do you remember what version of Apache you used this config with? I'm getting ready to set up a new reverse proxy for my Exchange 2007. I want to make sure the apache build I use is compatible with your tested config. thanks again for posting this, it's a huge help. Kevin- do you remember what version of Apache you used this config with? I’m getting ready to set up a new reverse proxy for my Exchange 2007. I want to make sure the apache build I use is compatible with your tested config. thanks again for posting this, it’s a huge help.

]]> By: Kevin Pendleton http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/comment-page-1/#comment-300 Kevin Pendleton Wed, 23 Jun 2010 04:26:41 +0000 http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/#comment-300 I'm sorry I can't really be of any help on this one. We migrated to a Blackberry Enterprise Server (BES) several years ago and shutdown access to BIS through OWA. I can tell you though that Windows Mobile, iPhones, etc. use OWA and Blackberries do not. They use the EWS subfolder, so verify that you have that one setup as well. The Blackberry user would then log in to their BIS account set up their Exchange email address pointing it to the OWA URL (not sure if you are supposed to have the /OWA at the end or not). Then the Blackberry servers hit your servers to send/receive email. HTH, good luck! I’m sorry I can’t really be of any help on this one. We migrated to a Blackberry Enterprise Server (BES) several years ago and shutdown access to BIS through OWA. I can tell you though that Windows Mobile, iPhones, etc. use OWA and Blackberries do not. They use the EWS subfolder, so verify that you have that one setup as well. The Blackberry user would then log in to their BIS account set up their Exchange email address pointing it to the OWA URL (not sure if you are supposed to have the /OWA at the end or not). Then the Blackberry servers hit your servers to send/receive email. HTH, good luck!

]]> By: Timothy Oefelein http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/comment-page-1/#comment-299 Timothy Oefelein Tue, 22 Jun 2010 19:13:15 +0000 http://www.utahsysadmin.com/2007/12/20/apache-reverseproxy-for-owa/#comment-299 If anybody is still monitoring this thread, can you confirm whether or not this configuration works with Crackberries trying to access Exchange through OWA? I'm currently using Squid as my reverse proxy to OWA and it works just fine with Droids, Windows Mobile phones and regular web browsers. Blackberry claims that it's an "unsupported" configuration though and refuses to help us get their phones working with it. If anybody is still monitoring this thread, can you confirm whether or not this configuration works with Crackberries trying to access Exchange through OWA? I’m currently using Squid as my reverse proxy to OWA and it works just fine with Droids, Windows Mobile phones and regular web browsers. Blackberry claims that it’s an “unsupported” configuration though and refuses to help us get their phones working with it.

]]>