OWA 2K in DMZ

[philyboy]

Hello all, (sorry this may be a bit long)

I have setup two exchange servers in domain as FE/BE config (both SP2). I want to put the FE in a newly created DMZ that is on a seperate IP network as normal. I configured the firewall to open required ports (too many I may add) from the DMZ to my two DC's that are also GC's and my BE Exchange server. As soon as I put the FE which is a member server into the DMZ (different IP network/subnet), OWA does not work, times out with HTTP 500 errors after login. I opened ALL ports on the firewall between these servers to test and still get the same thing.

I noticed that running the tool NLTEST /dsgetsite on the member FE server in the DMZ I get ERROR_NO_SITE stating it does not know what 2000 site it belongs to. I tried creating the DMZ subnet in Sites & Services and assigned it to my london site but still no joy. I can logon to the domain fine. If I DCPROMO the FE member server to a DC, all works fine, but obviously not good to have a DC in the DMZ.

Please help!!!!!

Thanks in advance!

 

[ianbla]

Hi,

Did you make any progress on this? I am having the same problem.

cheers
Ian.

 

[namkiwi]

Did you set up your Exchange server in the domain or outside the domain. You need to set it up in the domain and then move it out to the DMZ. Unless you want to just open 80 and 443 to your Front End server in the internal network. We found that after opening all the recommended ports it is almost the same as having the FE server on the internal network.