Problem I can't seem to get solved: Give users access to iFolder from the
outside.

Situation:

BMserver (BM3.7) running SBS6.04-eDir873
Public address 62.xxx.xxx.001
Private address 192.168.1.253
secondary ipaddress 62.xxx.xxx.002 to 192.168.1.252

Mail/iFolder server running SBS6.04-eDir873
ipaddress 192.168.1.252

There seems to be a problem getting LDAP running on the Mail/iFolder
server but I'm reluctant to rebuild Edir as per several TID's
(due to Groupwise running here as well).
I therefor set up iFolder using the BMserver's LDAP for user
authentication.

This works just fine for anyone being on the private side of the
BM server, however users on the public side don't get access.

They do get access when I unload ipflt on the BMserver so it must be a
filtering problem I overlooked.

I have the following exceptions in place:

• Source Interface: Public
• Destination Interface: Private
• Packet Type: http in (https in)
• Protocol: TCP
• Src Port(s): 80 (seperate filter for 443)
• Dest Port(s): 1024-65535
• ACK Bit Filtering: disabled
• Stateful Filtering: disabled
• Packet Type: http in (https in)
• Src Addr Type: Any Address
• Dest Addr Type: Host (192.168.1.252)
• Comment: http (https) in over nat for iFolderServer

• Source Interface: Private
• Destination Interface: Public
• Packet Type: http response (https response)
• Protocol: TCP
• Src Port(s): 80 (seperate filter for 443)
• Dest Port(s): 1024-65535
• ACK Bit Filtering: enabled
• Stateful Filtering: disabled
• Packet Type: http response (https response)
• Src Addr Type: Host (192.168.1.252)
• Dest Addr Type: Any Address
• Comment: http (https) out over nat for iFolderServer

could anyone please advise????