Re: VPN with Exchange issue
Jean-Francois Dive <[email protected]> Thu, 2 Dec 2004 09:26:23 +0100
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <[email protected]> |
setup the vpn such as there is a dedicated tunnel for the ip address of the exchange server (and leave the rest for other access), this should install, in theory a host route for exchange server to the virtual adapter and make the problem less lickely to occur due to routing problem. I only make asumption that the shiva client works as most of it's conterparts, beeing by installing a virtual adapter. On Tue, Nov 30, 2004 at 08:14:29PM -0500, Dube, Paul wrote: > Greetings all, > I have a client that is presenting me with a new issue for which I do > not yet have all the facts. I will be on site tomorrow and hope to at > least get those. However, from what I have gathered so far, they are > using Outlook and Exchange with a custom developed application using > public folders. The data in the public folders must be available when > not connected so it must use the 'available offline' aspect of that > combination. > I am not completely familiar with Outlook/Exchange but I believe that > this synchronization of content only transpires when using the native > connect mode which is not commonly available without a VPN. My client is > using the Shiva VPN client to connect to the LAN and access the Exchange > server. The issue arises when they are in a hotel or other location with > a LAN in the same subnet (192.169.1.255) and there is a machine on the > LAN at the same IP address as the exchange server on the corporate LAN. > I am wondering if simply putting the Exchange server on an IP unlikely > to be assigned to a machine on another LAN, using a reserved address and > 1-1 NAT, or routing the connection over an SSH redirect would be a > workable solution. I am also wondering if the issue only arises due to > an oversight in initial implementation and the Shiva VPN can be > configured to route all requests on the specified ports over the VPN to > a remote machine, ignoring any local machine with the same IP address. > > Thank in advance, > Paul Dube > > Paul Dube <[email protected]> > begin:vcard > fn:Paul Dube > n:Dube;Paul > adr:;;68 Radtke Road;Randolph;NJ;07869-3813;USA > email;internet:[email protected] > tel;home:973.537.7017 > tel;cell:973.886.4889 > note;quoted-printable:i-Name:=0D=0A= > =0D=0A= > HTML Link/HTML Link Code=0D=0A= > =3Dpaul.dube=0D=0A= > <a href=3D"http://public.xdi.org/=3Dpaul.dube">=3Dpaul.dube</a>=0D=0A= > =0D=0A= > Plain Text Link=0D=0A= > http://public.xdi.org/=3Dpaul.dube=0D=0A= > =0D=0A= > Reachable via SIP:=0D=0A= > 011 0 393 225562 from Vonage=0D=0A= > 225562 FWD (226598)=0D=0A= > 0451 225562 from Packet8=0D=0A= > 1(700)9 225562 from Asterisk Exchange (IAXTEL)=0D=0A= > **393 225562 from IConnectHere, CallUK, IPTel, InterViVo=0D=0A= > PaulDube Skype=0D=0A= > Reachable via IM:=0D=0A= > PaulRDubeJr - AIM=0D=0A= > 162492218 - ICQ=0D=0A= > PaulDube - Yahoo=0D=0A= > [email protected] - MSNM=0D=0A= > PSTN:=0D=0A= > 973-886-4889 cell=0D=0A= > 973-537-7017 home = > =0D=0A= > 877-780-9920 business voicemail=0D=0A= > 877-780-9920 Fax=0D=0A= > FWD SIP User Name: 226598=0D=0A= > > x-mozilla-html:FALSE > url:http://www.pauldube.net > version:2.1 > end:vcard > > _______________________________________________ > VPN mailing list > [email protected] > http://lists.shmoo.com/mailman/listinfo/vpn -- -- -> Jean-Francois Dive --> [email protected] I think that God in creating Man somewhat overestimated his ability. -- Oscar Wilde