OpenChange exchange connect remotely?

[shocked]

Hi,

 I can connect my outlook to openchange in zentyal with no problem when I am on the local zentyal network.  I want to be able to connect my home pc outlook to exchange as well.  My home pc is not on the zentyal lan. 

Is this possible?  I have searched the forums and read all the docs I can find, and I am not able to connect via my home network.  I tried all firewall changes on zentyal (even off).. and no luck.

Any thoughts?

Thank you

[robb]

Did you forward the ports OpenChange uses to Zentyal on your router?

[shocked]

Robb,

 Thank you for the reply.  Can you clarify which ports are ok to have publicly open for exchange?

Thank you

[robb]

Julien already answered this in an other thread: https://forum.zentyal.org/index.php?topic=20391.0

[shocked]

Robb,

 Yes, he said to not open the ports:
    135/tcp (endpoint mapper)
    1024/tcp or similar* (where openchange mapiproxy endpoint is bind)
publicly, and to instead setup a vpn. 

As I understand it, RPC over HTTP is the correct way to connect exchange over the internet and does not cause any security issues.

Someone did ask about this here:
https://forum.zentyal.org/index.php?topic=19010.0

but there is no reply.

That is why I am asking, maybe I am missing a configuration step somewhere.  Or, maybe there is no secure way to do this via Zentyal yet? (without a vpn).

Thank you

[robb]

If I understand correctly, Zentyal 3.4 will provide RPC over HTTP. Zentyal 3.3 does not provide this.

[shocked]

Robb,

 I am using 3.4 with the latest updates.  Maybe it is not implemented yet.  Thank you for your replies.