Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - itngo

#136
22.7 Legacy Series / Re: Exchange 2019 and NGINX
August 01, 2022, 11:39:12 AM
Hi,
yes we made the "autodiscover trick" for all locations/folders and also set Basic-Auth on Exchange.
But the issue with OAB still persists....
#137
22.7 Legacy Series / Exchange 2019 and NGINX
July 29, 2022, 11:16:28 AM
Hi,
following this Guide https://forum.opnsense.org/index.php?topic=21154.msg99523#msg99523
we get Exchange WAF up and running for Autodiscover and Outlook/MAPI very well.
However there stays one issue when we try to download OAB from Clients.

Wenn we switch DNS back to our Sophos UTM-WAF the issue is gone.
There is nothing logged in nginx-error-log or web-error-log. Just additional 401 responses.

Maybe someone had this fixed already?
#138
22.1 Legacy Series / NGINX - Custom Parameters.
July 27, 2022, 07:51:51 AM
Currently we create include files to workaround some issues.
Example Safari on MacOS does not like UPGRADE-Header in http/2 and refuses to load webpage.
Instead of searching for the right file-name for the location-include, it would be nice if that file gets auto-created and maybe have a text-field in WebGUI where these parameters can be put.

Making this for 200 Webs and Locations is a bit hard at least else....
#139
Sometimes you make a mistake and get massive amount of IP-Adresses in the NGINX Banned list.

Is there a way to bulk remove the all in the GUI?
Also sometimes it would be nice to change settings for all HTTP-Servers at once. (example. Disable Bot Proteciton)

There is no way in the WebGUI, isn't it?

Is there a way to just edit a file at least or how can this be done?
#140
Ok understood.
But the return-code 403 is important for us, as this will tell "possible" outlook Clients to continue with the SRV-Record without any delay. This keeps Outlook-Clients fast on start and discovery. So I guess we have to put an include-file in the Location to set return code?
#141
Hello everyone...

we use DNS SRV-Entry for autodiscover and do not Publish "Exchange-Autodiscover" on our Webpage.
However, we have plenty of requests for fqdn/autodiscover/autodiscover.xml which reach the Webserver and get answered with 404 not found.

Is it possible with some URL-Rewrite-Rule to answer this request directly on the nginx-reverse-proxy with 403 (forbidden).

How is this be done?

Thank you.