Re: VPN with Exchange issue

"Brian Bruns" <[email protected]> Wed, 1 Dec 2004 22:01:59 -0500
Newsgroups gmane.comp.security.vpn
Message-ID <000e01c4d81b$4c4f7990$05010e0a@intrepid>
On Wednesday, December 01, 2004 8:21 PM [EST], SKIP HOFMANN wrote:

> Setup Exchange 2003 and have your clients run outlook 2003 on
windows
> XP sp1. Setup exchange for RPC over HTTPS and your issue is solved.
> No more need to use a VPN
>
>


Or, if you still want to use the VPN, you can do something like setup
a batch file (if its a VPN client capable of command line commands)
that will establish the VPN, then run the route command as follows:

route ADD <IP Address of Exchange Server> MASK 255.255.255.255 <IP
Address of local end of VPN tunnel> METRIC 1


That will force a route over the VPN to the Exchange server.  When the
VPN is killed, the route will go down with it.  This works nicely with
Win2k/XP/2003 and the built in IPSec/PPTP client, which can activate
connections via the command line.

This would allow you to keep the Exchange server behind the firewall
and not have to expose it at all to the web (and thus avoid any future
exploits directed specifically at it).

-- 
Brian Bruns
The Summit Open Source Development Group
Open Solutions For A Closed World / The AHBL
http://www.sosdg.org  /  http://www.ahbl.org