Subscribe to Windows IT Pro

 

Get Newsletters

  • Get the Latest News
  • Product Updates
  • Helpful Tricks
  • Productivity Tips

Subscribe Now!

August 22, 2005 12:00 AM

Don't Change the Port Number on the Front End

Windows IT Pro
InstantDoc ID #47370
Rating: (0)

How can we change the port number we use for our Internet-facing Exchange Server Outlook Web Access (OWA) and Remote Procedure Call over HTTP Secure (RPC over HTTPS) clients?

To be blunt, you can't. Sure, you can tell Microsoft IIS to listen on a different port; it will obey and start listening for connections on the port you specify. But the front-end server just acts as a sort of proxy server that accepts client requests and sends them to the back-end server. That back-end server is the one that's responsible for rendering all the content that users see, and the server doesn't support anything other than the default ports: port 80 for unsecured HTTP and port 443 for HTTP plus Secure Sockets Layer (SSL). When the back end renders an OWA page, all the links it constructs use one of those two default port numbers. If you change the port number on the front end, the back end won't honor that change, resulting in broken links. Furthermore, why would you want to change the port number? If you're thinking of putting public services on lesser-known ports as an attempt to secure them through obscurity, that's like hiding your money under the mattress instead of keeping it in the bank. Such measures might lend a little temporary security, but anyone who port scans your public IP address will quickly discover the port-number change, rendering it useless as a security measure.

Related Content:

ARTICLE TOOLS

Comments
    There are no comments to display. Be the first one!
You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

White Papers

Get your Windows 7 deployment off to the right start by implementing PC lockdown. A locked-down environment is easier and cheaper to support since users are less likely to make unnecessary changes to the core system configuration - read more here!

Essential Guides

Is your iSCSI "lossy"? The reality is that most off-the-shelf Ethernet hardware deployed for iSCSI can lose packets, resulting in slow performance or application downtime. Learn how to assess your current iSCSI infrastructure and engineer an advanced iSCSI SAN infrastructure.

Web Seminars

What's the best way to keep your network safe from malware? In this web seminar, security expert Greg Shields suggests an alternative method to the traditional blacklisting approach that is common with anti-virus and anti-malware solutions.

eLearning Series

We bring the experts direct to you to share their real-world perspective and expertise. During each event, three sessions stream in real time, so you can learn, ask questions, and get solutions.
Upcoming event: Getting the Most with Exchange 2010 with Paul Robichaux

Subscribe to Windows IT Pro!

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.