Re: RWW with no https

I do not consider a :8080 a url that is appropriate for a SSL end user connection.

Ergo my statement. Furthermore he's already stated that he's using 443 for the Kerio mail server, ergo he may not have the url you think he has.

SuperGumby [SBS MVP] wrote:
BTW, took me all of 30s to make https://mickmalloy.dyndns.org:8080/Remote available _while also retaining the default settings_.
Someone want to check it from outside?

"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message news:OFcxaMyKJHA.728@xxxxxxxxxxxxxxxxxxxxxxx
Has no-one looked at their IIS config? or do people just not understand it (in which case they shouldn't be modifying it)?

/remote is a subfolder of 'Default Web Site' and the default site on SBS does not require HTTPS. The CEICW can be used to open the full default site(a damned silly idea).

The security settings for /remote have the option ticked to 'require SSL'. As should be. Go on, turn it off, I'll reinstall your SBS in a few days time.

The fact that RossK needs to ask how to do what he wishes precludes him from the group of people who should be attempting it.

"rossk" <rkovelman@xxxxxxxxxxxxxxxx> wrote in message news:31a2cd08-69cc-4951-936a-c78ef8fef1b4@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
So just so we are all clear, RWW HAS to go over HTTPS. There is no
way around that? Even if I do https but port 8080 would not matter
correct?
Thanks

On Oct 10, 5:04 pm, Susan Bradley <sbrad...@xxxxxxxxxxx> wrote:
rossk wrote:
Yes I use Kerio for the 75GB limitation Exchange has but I dont want
to get into a debate about that. Basically that server (webmail) is
running Https, I still have http open and free to use where ever. I
would like to use it for RWW, is this possible?
Thanks
On Oct 10, 2:51 pm, "Gregg Hill" <greggmhill at please do not spam me
at yahoo dot com> wrote:
I agree, except I silently assumed he had some valid reason. Perhaps the two are unrelated systems, i.e., SBS for one domain, Kerio for another. Or maybe using Kerio to get more than 75 limit. We won't know until he chimes in with details.
Gregg Hill
"Cris Hanna [SBS - MVP]" <crisnospamha...@xxxxxxxxxxxxxxxxxxxxx> wrote in messagenews:OMK$0RwKJHA.4292@xxxxxxxxxxxxxxxxxxxxxxx
Or dump Kerio Mail Server since you have the same capabilities in Exchange ;-)
--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672...
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.
"Gregg Hill" <greggmhill at please do not spam me at yahoo dot com> wrote in messagenews:%2339ibMwKJHA.5904@xxxxxxxxxxxxxxxxxxxxxxx
A report from dnsstuff.com indicates that you have Kerio Mail Server. Would
it not be easier to change Kerio's ports
(http://support.kerio.com/index.php?_m=knowledgebase&_a=viewarticle&kb...)
than to hack SBS?
Gregg Hill
"rossk" <rkovel...@xxxxxxxxxxxxxxxx> wrote in message
news:300e3428-d13c-4889-9316-39e9542b802d@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I can not use https. Https goes to a different server running
webmail. Maybe I am confused or wrong but you cant have to servers
behind a firewall running https and allow outside connections in. I
know if its over http and at port 8080 that will work, or at least I
think I am correct. I am not running SBS 2008, I have 2003. Yes 4125
is now changed to 8080 in the registry but I am not following you on
the proxy part.
Thanks
On Oct 10, 11:42 am, "Cris Hanna [SBS - MVP]"
<crisnospamha...@xxxxxxxxxxxxxxxxxxxxx> wrote:
Some folks insist on breaking what works so absolutely well. :-)
What is the issue around connecting to the RWW site via SSL? You're users
don't like the popup security warning? Or they don't want to take the time
to install the certificate on they're local machine to make those warnings
go away.
SBS 2008 absolutely requires connection by SSL and you won't be able to
get to the desktops without the certificate on the remote box
--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008
Unleashedhttp://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672...
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.
"rossk" <rkovel...@xxxxxxxxxxxxxxxx> wrote in
messagenews:4974de83-de8e-4984-b99a-e954a846c2dd@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I basically want to run Remote web workplace over the standard web
port but going to port 8080. I have what I thought changed the
registry setting for RWW from 4125 to 8080 but I want to run the site
by http and not https. Is this possible?
Prob is Ross is that all of that network traffic would be going over an
insecure connection.

Usernames
Passwords

changing the 4125 control port to 8080 just changes the control port not
the SSL binding ports.

Typically you can only have one SSL port bound to an IP address, so
without a second IP, an SSL connection isn't possible.



.

Relevant Pages

  • Re: Outlook Vs Outlook Anywhere
    ... My _opinion_ is that if users are too lazy to remember httpS they should not be allowed to connect. ... Regardless, you don't need to open port 80 for Outlook RPC, as you're configuring that to use https anyway, and once configured, the user doesn't have to worry about the connection settings. ...
    (microsoft.public.windows.server.sbs)
  • Re: SSH tunneling/port forwarding and stateful packet inspection
    ... > have reconfigured SSH to run over port 443 the trace shows it as SSL ... Your packet trace identifies the TCP connection as ...
    (comp.security.ssh)
  • Re: Outlook Vs Outlook Anywhere
    ... This guy at my company was going on about opening port 80 and I didn't really like the sound of that, that's why I stuck with the CEICW and sought your views/recomendations. ... He kept talking about Outlook over http...I kept saying to him " you'll be talking about 'rpc over https then' "? ... Regardless, you don't need to open port 80 for Outlook RPC, as you're configuring that to use https anyway, and once configured, the user doesn't have to worry about the connection settings. ...
    (microsoft.public.windows.server.sbs)
  • Re: multiple secure websites on a server
    ... SSL doesn't support host header. ... I can not open the first site with HTTPS. ... IIS can allow multiple sites to listen ... > on port 80 but with HTTPS, IIS allow only one site listen ...
    (microsoft.public.inetserver.iis.security)
  • Re: ISA 2004 HTTPS Protocol Port Addition
    ... HTTP will run any port "as is" with no rule changes. ... HTTPS will run on any port if you hack the ISA with a script to tell it to ... SSL Tunneling; Informational RFC ... Tunneling SSL Through a WWW Proxy ...
    (microsoft.public.isa)