Hi, Mhh.. We don't use squid via ssl nor OWA with ssl. (i think debugging is simplier without that) In /etc/hosts there is a correct naming of the server, But it doesn't work. I can get to the login window but not further..... SSL activation on squid i don't know either how to manage :-( Thanks, for response. Cheers, Andrew Jason Whiteaker schrieb am Montag, 25. Juli 2005 15:10: > Hi Andrew, > > I wish I had better news, as I too have tried to get OWA to work with > Squid. The final answer is that I was able to get OWA to work with > Squid, however, you'll find that the spell checker is broken. > It appears > to be because of non-RFC compliance by OWA (big surprise > there, eh?) :-) > > The issue stems from apparent HTTP "chunking" issues, and > from what I've > seen, a future release of Squid may address this. For now, we > can access > OWA via Squid (HTTPS -> Squid -> HTTP -> OWA), but the spell checker > function is broken. This may not be a big deal to your user base, but > it's an issue here. > > See this Microsoft article: > > http://support.microsoft.com/default.aspx?scid=kb;en-us;307347 > > I think your current issue is that you'll need a filter on OWA so that > it will not send HTTPS back as part of the HTTP header info, > that is, it > sounds like you're having the issue I ran into - OWA doesn't know that > it's behind a proxy, so when it responds, it responds with > HTTPS in the > header info and your client establishes the connection to the > OWA server > that "bypasses" the proxy. Your Squid config seems OK. Be > sure to create > a host entry for your mailserver in /etc/hosts that points to the real > (internal) IP of the OWA server. > > Good luck! > > -Jason > > > > > -----Original Message----- > From: Mrvka Andreas [mailto:mrv@xxxxxxx] > Sent: Monday, July 25, 2005 2:08 AM > To: Squid-Users > Subject: owa access > > hi list, > > i know, there are many writings about outlook web access and how to > configure it with transparent proxy. > > but i still have problems :-( > > > I configured my proxy like this: > http_port 80 > httpd_accel_host internalmailserver > httpd_accel_port 80 > httpd_accel_single_host on > httpd_accel_with_proxy on > httpd_accel_uses_host_header off > > > I can connect from outside and get my basic authentication from my > internalmailserver. But then i will be forwarded direct to my > internalmailserver And never via my published proxy name. > > In fact, connection to internalmailserver is denied. > > Please can you also give me a hint how to change my config to use SSL? > (how to create a ssl certificate) > > > Thanks, > Andrew
