[FW-1] How to allow Exchange access

[Raymond N <OutMail@FW1-NOSPAMARDENNET.COM>]

Hi there,

I am using Firewall-1 4.1 SP4.  I want NT client workstation in network-A
be able to access the MS Exchange server in network-B, where the CP
firewall is in between.  The Exchange server is v5.5.  No network address
translation.

I know that there is pre-defined services "MSExchange", "MSExchange-v5.5",
"MSExchange-RemoteAdmin", "MSExchange-RemoteAdmin-v5.5" and
"MSExchange-SiteConnector".  What is needed in my situation?  And how the
rule(s) should look like?

I try this:
source = network-a
destination = network-b
service = all MSExchange service defined above
action = accept

It doesn't work.  From the log, I see that my client is trying to talk to
the server on tcp port 2400, and is being dropped.  I suppose using those
pre-defined resources can eliminate the need to open all the >1023 TCP
ports, isn't it?

Please help.

-raymond (outmail@ardennet.com)


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================