Re: [gentoo-server] using apache2 as a reverse proxy for exchange server

[Haim Ashkenazi]

On Mon, 2004-12-06 at 20:21 +0000, Casper Gasper wrote:
> On Monday 06 December 2004 01:10, Haim Ashkenazi wrote:
> > Hi
> >
> > I'm trying to configure apache2 as a reverse proxy for an exchange
> > server that has internal address. I know it's a bad idea, but the client
> > insists.
>
>  Bad idea?  Why?  I think if you set it up properly it's a very good way of
> securing Outlook Web Access.
I think it's not really safe, but it's better then the other options I
had. If it were my company I wouldn't allow it, but then, if it were my
company, I wouldn't use exchange... :)

>
> >
> > so far I had no luck. I tried using the following configuration (which I
> > copied from mod_proxy webpage):
> >
> > ProxyRequests Off
> >
> > <Proxy *>
> >         Order deny,allow
> >         Allow from all
> > </Proxy>
> >
> > ProxyPass /exchange http://192.168.168.1/exchange
> > ProxyPassReverse /exchange http://192.168.168.1/exchange
> >
> > but it seemed to just redirect the connection to 192.168.168..., which
> > of-course I can't access. there were no errors on ssl_error_log.
> >
>
> Just checked my config file -- maybe you need this line:
>
> RequestHeader set front-end-https on
>
> or else the responses will be proxied back as http requests, and fail.  (At
> least, I think that's what I had to do, I can't test it right now).
thanks I'll try that tomorrow. if it's not a problem, can you send me
the section of the configuration that configures the reverse proxy? I
found a few but none of them worked, so by now I'm a little confused
about what settings are really needed. 

thanx
-- 
Haim