Re: VPN with Exchange issue

Jean-Francois Dive <[email protected]> Thu, 2 Dec 2004 09:26:23 +0100
Newsgroups gmane.comp.security.vpn
Message-ID <[email protected]>
setup the vpn such as there is a dedicated tunnel for the ip address of
the exchange server (and leave the rest for other access), this should
install, in theory a host route for exchange server to the virtual
adapter and make the problem less lickely to occur due to routing
problem. I only make asumption that the shiva client works as most of
it's conterparts, beeing by installing a virtual adapter.

On Tue, Nov 30, 2004 at 08:14:29PM -0500, Dube, Paul wrote:
> Greetings all,
> I have a client that is presenting me with a new issue for which I do 
> not yet have all the facts. I will be on site tomorrow and hope to at 
> least get those. However, from what I have gathered so far, they are 
> using Outlook and Exchange with a custom developed application using 
> public folders. The data in the public folders must be available when 
> not connected so it must use the 'available offline' aspect of that 
> combination.
> I am not completely familiar with Outlook/Exchange but I believe that 
> this synchronization of content only transpires when using the native 
> connect mode which is not commonly available without a VPN. My client is 
> using the Shiva VPN client to connect to the LAN and access the Exchange 
> server. The issue arises when they are in a hotel or other location with 
> a LAN in the same subnet (192.169.1.255) and there is a machine on the 
> LAN at the same IP address as the exchange server on the corporate LAN.
> I am wondering if simply putting the Exchange server on an IP unlikely 
> to be assigned to a machine on another LAN, using a reserved address and 
> 1-1 NAT, or routing the connection over an SSH redirect would be a 
> workable solution. I am also wondering if the issue only arises due to 
> an oversight in initial implementation and the Shiva VPN can be 
> configured to route all requests on the specified ports over the VPN to 
> a remote machine, ignoring any local machine with the same IP address.
> 
> Thank in advance,
> Paul Dube
> 	
> Paul Dube <[email protected]>

> begin:vcard
> fn:Paul Dube
> n:Dube;Paul
> adr:;;68 Radtke Road;Randolph;NJ;07869-3813;USA
> email;internet:[email protected]
> tel;home:973.537.7017
> tel;cell:973.886.4889
> note;quoted-printable:i-Name:=0D=0A=
> 	=0D=0A=
> 	HTML Link/HTML Link Code=0D=0A=
> 	=3Dpaul.dube=0D=0A=
> 	<a href=3D"http://public.xdi.org/=3Dpaul.dube">=3Dpaul.dube</a>=0D=0A=
> 	=0D=0A=
> 	Plain Text Link=0D=0A=
> 	http://public.xdi.org/=3Dpaul.dube=0D=0A=
> 	=0D=0A=
> 	Reachable via SIP:=0D=0A=
> 	011 0 393 225562 from Vonage=0D=0A=
> 	225562  FWD (226598)=0D=0A=
> 	0451  225562 from Packet8=0D=0A=
> 	1(700)9 225562 from Asterisk Exchange (IAXTEL)=0D=0A=
> 	**393 225562 from IConnectHere, CallUK, IPTel, InterViVo=0D=0A=
> 	PaulDube Skype=0D=0A=
> 	Reachable via IM:=0D=0A=
> 	PaulRDubeJr - AIM=0D=0A=
> 	162492218 - ICQ=0D=0A=
> 	PaulDube - Yahoo=0D=0A=
> 	[email protected] - MSNM=0D=0A=
> 	PSTN:=0D=0A=
> 	973-886-4889 cell=0D=0A=
> 	973-537-7017 home =
> 	=0D=0A=
> 	877-780-9920 business voicemail=0D=0A=
> 	877-780-9920 Fax=0D=0A=
> 	FWD SIP User Name: 226598=0D=0A=
> 	
> x-mozilla-html:FALSE
> url:http://www.pauldube.net
> version:2.1
> end:vcard
> 

> _______________________________________________
> VPN mailing list
> [email protected]
> http://lists.shmoo.com/mailman/listinfo/vpn

-- 
--

-> Jean-Francois Dive
--> [email protected]

  I think that God in creating Man somewhat overestimated his ability.
    -- Oscar Wilde