RPC over HTTP

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Kelvin Armstrong (anonymous_at_discussions.microsoft.com)
Date: 07/20/04


Date: Tue, 20 Jul 2004 05:21:02 -0700

Are the proper ports opened in the firewall to the
exchange server? According to the knowledge base artice
833401, ports are 6001 and 6004 TCP.
>-----Original Message-----
>Hello,
>
>I spent an entire day attempting to configure Exchange
>2003 for RPC over HTTP functionality. This is a single
>server installation. We have a cisco PIX firewall which
>is doing network address translation. There is an
>inbound port mapping for port 443 for https traffic.
>
>I have followed all of the insturctions listed in KB
>Article 833401. I can connect to https://my.server.com
>and get the HTTP Error 403.2 - Forbidden: Read access is
>denied. I do not get any SSL certificate errors.
>
>When I configure Outlook 2003 to connect using RPC to
the
>server, I get the login dialog box which prompts for a
>username and password, which I enter (this appears to be
>the authentication to IIS), and then the box go aways
for
>about 20-30 seconds until I get "The connection to the
>Microsoft Exchange Server is unavailable.
>
>In my IIS log file, I see the following:
>
>2004-07-20 00:48:47 192.168.1.5
>RPC_IN_DATA /rpc/rpcproxy.dll mail.xyz.com:6004 443
>XYZ\administrator 207.1.1.87 MSRPC 404 2 1260
>2004-07-20 00:48:47 192.168.1.5
>RPC_OUT_DATA /rpc/rpcproxy.dll mail.xyz.com:6004 443
>XYZ\administrator 207.1.1.87 MSRPC 404 2 1260
>2004-07-20 00:48:47 192.168.1.5
>RPC_IN_DATA /rpc/rpcproxy.dll mail.xyz.com:593 443
>XYZ\administrator 207.1.1.87 MSRPC 404 2 1260
>2004-07-20 00:48:47 192.168.1.5
>RPC_OUT_DATA /rpc/rpcproxy.dll mail.xyz.com:593 443
>XYZ\administrator 207.1.1.87 MSRPC 404 2 1260
>
>Can anyone tell me why I'm getting these 404 errors? I
>can authenticate to the IIS server just fine if I'm
going
>to something like https://mail.xyz.com/exchange. I've
>disabled anonymous authentication on the /rpc directory
>and enabled basic authentication exactly as specified in
>the docs.
>
>Could this problem somehow relate to the fact that the
>internal hostname/IP address is different than the
>external hostname/IP address because we're using NAT
with
>split horizon DNS? I've put in all possible hostnames
in
>the registry under the ValidPorts key. Since the call
to
>IIS appears as mail.xyz.com in the logs, I'm assuming
>this is the hostname which it's attempting to proxy the
>RPC requests, so that shouldn't be a problem since I've
>definately put that hostname in ValidPorts.
>
>I think it's something more simple to do with IIS, but
>I've run out of ideas.
>
>Your help is very much appreciated.
>
>Mark
>
>
>.
>



Relevant Pages

  • Re: IIS / Web Services Security threats
    ... You will be surprised to know, due to a recent virus attack on the perimeter network, the common ports have been closed too. ... I also develop Java applications which runs on weblogic server. ... Since, the entire world knows about port 80 and 443, I thought opening a specific port with IP Sec configuration may make the network little secure. ... My security team thinks allowing communication between the two IIS ...
    (microsoft.public.dotnet.framework.webservices)
  • RPC over HTTP
    ... 2003 for RPC over HTTP functionality. ... server installation. ... In my IIS log file, ... internal hostname/IP address is different than the ...
    (microsoft.public.exchange.connectivity)
  • Re: How to shut off the ports
    ... > ports, and more urgently, how to shut them down. ... We don't have the server resource ... 7007 are not ports that come with Windows or with IIS. ... Running a firewall is only part of a complete security plan. ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS Outbound Ports
    ... What services are you using on IIS? ... The server is behind a firewall which only ... If all outgoing ports, ... Entries appear in the firewall logs but ...
    (microsoft.public.inetserver.iis)
  • Re: redirecting from mydomain.com to www.mydomain.com
    ... You can do this in IIS if you would like to. ... You should close down all ports you do not use. ... I know I can write an ASP to redirect the site to full name as www.mydomain.com, but> is there any other elegant way of doing this in IIS so for every site> that I install I don't need to dump a small script to do the work? ... I have windows 2000 just running of covad's dsl T1 and the> router is just directly connect to my win 2000 server without any> firewall protection.. ...
    (microsoft.public.inetserver.iis)