RSS

CCR的防火墙和forefront for exchange的一个case

20 Sep

在ccr节点上安装forefront for exchange,然后开启windows防火墙后,开启forefront控制台后,发现错误:ERROR: cannot connect to service。微软有一篇KB http://support.microsoft.com/kb/929073

按照kb做完后,控制台倒是可以打开了。可是在p节点开启forefront控制还是有问题。没办法了,创建2个rule吧。

 

   1: netsh advfirewall firewall add rule name="Forefront for Exchange Controller Service" dir=in action=allow program="C:\Program Files (x86)\Microsoft Forefront Security\Exchange Server\FSCController.exe" description="Allow connection to Forefront for Exchange controller service" enable=yes profile=any localport=RPC protocol=TCP security=notrequired
   2: netsh advfirewall firewall add rule name="Forefront for Exchange Admin tool" dir=in action=allow program="C:\Program Files (x86)\Microsoft Forefront Security\Exchange Server\FSSAClient.exe" description="Allow connection to Forefront for Exchange admin tool" enable=yes profile=any localport=RPC protocol=TCP security=notrequired

两个节点上都要创建,完毕后要重启forefront服务

检查forefront的General Options中Redistribution server是选中状态,否则p节点可能无法从a节点获取更新。

Advertisements
 
Leave a comment

Posted by on September 20, 2009 in Exchange Server

 

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: