Re: VPN with Exchange issue
"Brian Bruns" <[email protected]> Wed, 1 Dec 2004 22:01:59 -0500
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <000e01c4d81b$4c4f7990$05010e0a@intrepid> |
On Wednesday, December 01, 2004 8:21 PM [EST], SKIP HOFMANN wrote: > Setup Exchange 2003 and have your clients run outlook 2003 on windows > XP sp1. Setup exchange for RPC over HTTPS and your issue is solved. > No more need to use a VPN > > Or, if you still want to use the VPN, you can do something like setup a batch file (if its a VPN client capable of command line commands) that will establish the VPN, then run the route command as follows: route ADD <IP Address of Exchange Server> MASK 255.255.255.255 <IP Address of local end of VPN tunnel> METRIC 1 That will force a route over the VPN to the Exchange server. When the VPN is killed, the route will go down with it. This works nicely with Win2k/XP/2003 and the built in IPSec/PPTP client, which can activate connections via the command line. This would allow you to keep the Exchange server behind the firewall and not have to expose it at all to the web (and thus avoid any future exploits directed specifically at it). -- Brian Bruns The Summit Open Source Development Group Open Solutions For A Closed World / The AHBL http://www.sosdg.org / http://www.ahbl.org