Как опубликовать exchange протокол через микротик

от admin

Настроить работу Mikrotik RB751 с Microsoft Exchange для доступа к Outlook Web App из Интернета?

Роутер Mikrotik RB751 стоит как шлюз в Интернет (внутренний IP 192.168.0.1), в локальной сети имеется сервер с MS Exchange 2013 (192.168.0.3).
Как лучше сделать проброс на NATе на порт 443 почтового сервера из Интернета (чтобы из Интернета к Outlook Web App подключатся по https), если данный порт уже задействован (осуществляется проброс на другой сервер, допустим 192.168.0.2 порт 443)?
Имеющееся правило dstnat (protocol: 6 (tcp), dst-port: 443, action: dst-nat, to adress: 192.168.0.2, dst port: 443). Тупо заменив в правиле 192.168.0.2 на 192.168.0.3 выходит на OWA, но соответственно пропадает доступ к сервису на 192.168.0.2 через 443.

Соответственно имеется внешний домен server.ru, нужные NS-записи указывают на внешний айпишник Mikrotika.

Хотелось бы набирая извне в браузере mail.server.ru попадать на https://192.168.0.3/owa и набирая https://server.ru — попадать на https://192.168.0.2/

  • Вопрос задан более трёх лет назад
  • 6687 просмотров
  • Facebook
  • Вконтакте
  • Twitter

  • Facebook
  • Вконтакте
  • Twitter
  • Facebook
  • Вконтакте
  • Twitter

Боюсь тут поможет только проксирующий веб сервер внутри сети с несколькими виртуальными сайтам.
habrahabr.ru/post/142363
nginx.org/ru/docs/http/configuring_https_servers.html

пример конфига nGinx для сайта mail.server.ru

server <
listen 443;

ssl on;
ssl_certificate /etc/nginx/conf.d/cert/mail.crt;
ssl_certificate_key /etc/nginx/conf.d/cert/mail.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
server_name mail.server.ru;

location /web// <
proxy_pass https://192.168.0.3/;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $server_name;
proxy_read_timeout 500;
>

location / <
root /usr/share/nginx/html;
index index.html index.htm;
>

error_page 500 502 503 504 /50x.html;
location = /50x.html <
root /usr/share/nginx/html;
>

ОБЯЗАТЕЛЬНО!! Сгенерировать сертификаты для сайтов и подложить их в папку /etc/nginx/conf.d/cert/ (или другую но поменять путь в конфиге. )

По такой же аналогии создается второй конфиг, меняються директивы server_name, условие в IF, proxy_pass. И вроде желательно второй сертифкат.

Как опубликовать exchange протокол через микротик

Настроить работу Mikrotik RB751 с Microsoft Exchange для доступа к Outlook Web App из Интернета?

  • Вопрос задан более трёх лет назад
  • 6551 просмотр
  • Facebook
  • Вконтакте
  • Twitter

nimbo

  • Facebook
  • Вконтакте
  • Twitter
  • Facebook
  • Вконтакте
  • Twitter

server listen 443;

ssl on;
ssl_certificate /etc/nginx/conf.d/cert/mail.crt;
ssl_certificate_key /etc/nginx/conf.d/cert/mail.key;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
server_name mail.server.ru;

location /web// proxy_pass https://192.168.0.3/;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Host $server_name;
proxy_read_timeout 500;
>

location / root /usr/share/nginx/html;
index index.html index.htm;
>

error_page 500 502 503 504 /50x.html;
location = /50x.html root /usr/share/nginx/html;
>

Из-за настройки микротик Outlook не работает

Настройки микротик. 750GL
Привет. Я новичок в настройках сети микротик. Нужна помощь . Есть сеть со следующей топологией.

Как опубликовать exchange протокол через микротик

I am trying setup my SW Helpdesk but realized that I cannot even access my Exchange servers OWA from the outside. I think the issue could be that the Mikrotik is not configured to let the traffic through.

Is there anyone here that could assist?

Any help would be greatly appreciated.

Lyal

Lyal This person is a Verified Professional

10 of the Craziest Cyberattacks Seen in the Wild

NetTechMike

NetTechMike This person is a Verified Professional

If you are doing port forwarding you need 443, 80 to go to the exchange front end server. If you are allowing external connections for mail clients, you will need to enable a few more ports. See the link below.

If you are trying to get SW and OWA to both work, you may need multiple public IPs. You might look at the spiceworks cloud option.

6 Replies

JoeWilliams

JoeWilliams This person is a Verified Professional

EBS Computer Services is an IT service provider.

OWA just requires HTTPS (port 443) forwarding to your Exchange server.

NetTechMike

NetTechMike This person is a Verified Professional

If you are doing port forwarding you need 443, 80 to go to the exchange front end server. If you are allowing external connections for mail clients, you will need to enable a few more ports. See the link below.

If you are trying to get SW and OWA to both work, you may need multiple public IPs. You might look at the spiceworks cloud option.

Rod-IT

  • check 48 Best Answers
  • thumb_up 235 Helpful Votes

NetTechMike wrote:

If you are trying to get SW and OWA to both work, you may need multiple public IPs.

or you can use a reverse proxy, like this one detailed here

Lyal

OP Lyal This person is a Verified Professional

If you are trying to get SW and OWA to both work, you may need multiple public IPs. You might look at the spiceworks cloud option.

https://community.spiceworks.com/support/help-desk-cloud-edition

Is the cloud option also free?

Rod-IT

  • check 48 Best Answers
  • thumb_up 235 Helpful Votes

The cloud option is free, but it does not do inventory, nor do they work together.

Lyal

OP Lyal This person is a Verified Professional

I will stick to what I got then. Managed to get the ports sorted! Thank for all the help guys.

This topic has been locked by an administrator and is no longer open for commenting.

To continue this discussion, please ask a new question.

Read these next.

Spark! Pro Series — 5th September 2022

Another week, another Monday, another Spark! to brighten up your day and add a little more trivia to your repository. Today in History: 5th September 1975 – Lynnette Fromme attempts to assassinate Gerald For.

Читать:
Как прикрепить много документов в 1с 8
Nerd Journey # 184 — Dive Deeper and Enjoy the Process

Often times in the technology space we need to dive deep on a topic out of necessity to complete a task or a project, but when was the last time you did it for the fun of it or even enjoyed and appreciated the learning process? And when you do dive deep.

What does it take to be IT literate?

International literacy day is coming up this week, and I was thinking about what it takes to be literate in different languages, and then, further, what it takes to be competent in different life areas.For instance, there are thousands of courses, certifi.

Does MS offer volume discounts for Exchange Online plan?

Hi,Do you know if MS offer any volume discounts for Exchange Online plans? I see pricing starts with $4/user/month. However what if a company needs 100 accounts. Is the price still the same?I tried looking this up via Google but could not find it.

How to open OWA ports on Mikrotik

I am trying setup my SW Helpdesk but realized that I cannot even access my Exchange servers OWA from the outside. I think the issue could be that the Mikrotik is not configured to let the traffic through.

Is there anyone here that could assist?

Any help would be greatly appreciated.

User: Lyal v Os

Lyal This person is a Verified Professional

Enter to win a

Author Mike Kenning

NetTechMike This person is a Verified Professional

If you are doing port forwarding you need 443, 80 to go to the exchange front end server. If you are allowing external connections for mail clients, you will need to enable a few more ports. See the link below.

If you are trying to get SW and OWA to both work, you may need multiple public IPs. You might look at the spiceworks cloud option.

6 Replies

Author Joe Williams

JoeWilliams This person is a Verified Professional

EBS Computer Services is an IT service provider.

OWA just requires HTTPS (port 443) forwarding to your Exchange server.

Author Mike Kenning

NetTechMike This person is a Verified Professional

If you are doing port forwarding you need 443, 80 to go to the exchange front end server. If you are allowing external connections for mail clients, you will need to enable a few more ports. See the link below.

If you are trying to get SW and OWA to both work, you may need multiple public IPs. You might look at the spiceworks cloud option.

Author Rod McGarrigle

  • check 54 Best Answers
  • thumb_up 274 Helpful Votes

NetTechMike wrote:

If you are trying to get SW and OWA to both work, you may need multiple public IPs.

or you can use a reverse proxy, like this one detailed here

Author Lyal v Os

OP Lyal This person is a Verified Professional

If you are trying to get SW and OWA to both work, you may need multiple public IPs. You might look at the spiceworks cloud option.

https://community.spiceworks.com/support/help-desk-cloud-edition

Is the cloud option also free?

Author Rod McGarrigle

  • check 54 Best Answers
  • thumb_up 274 Helpful Votes

The cloud option is free, but it does not do inventory, nor do they work together.

Author Lyal v Os

OP Lyal This person is a Verified Professional

I will stick to what I got then. Managed to get the ports sorted! Thank for all the help guys.

This topic has been locked by an administrator and is no longer open for commenting.

To continue this discussion, please ask a new question.

Read these next.

One PC unable to scan to folder.

Hopefully one of you has come across this before. I have a customer with two PCs that scan to folder. One cannot seem to get the scans while the other works completely fine. The one with the problem is the main computer they use. I actually set up the.

run batchfile at logon from locked session

I have a GPO that runs a .bat file which installs a program at startup. And this works perfectly fine. As long as the user restarts their computers. The problem is that, I need to find a way to deploy this without having to restart the computer. I kno.

Snap! — 3D Printed Rocket Launch, MAR10 Day, Proprietary Ink, Employment Games

Your daily dose of tech news, in brief. Welcome to the Snap! Flashback: March 10, 2000: Dot-Com Bubble Peaks (Read more HERE.) Bonus Flashback: March 10, 2006: Mars Reconnaissance Orbiter Reaches Red Planet (Read more HERE.) You need t.

Password Issue

I have a domain that i set up all users on. I have staff that also have laptops that they log in remotely from. Some of them are reporting that the password on the laptop differs from the domain password. Is this because the laptop needs this account to g.

What are your opinions on this job opportunity?

Currently, work at a small-medium business as an internal IT jr system administrator. I started casually applying around as there is little room for position growth here. I ended up getting a job offer at a small MSP, they are around 10 or so techs, and t.

Похожие статьи