Blocking all the pages except Specific page for exchange Outlook on the web (OWA) using IIS ARR + URL Rewrite?

Question

Hi guys,

I have two IIS ARR + URL Rewrite deployed how reverse proxy to exchange server client access server.

I need to block all requests for my OWA URL <https://webapp.mydomain.net.br/owa>

But, i need to allow only to URL: https://webapp.mydomain.net.br/owa/auth/logon.aspx?replaceCurrent=1&url=https%3a%2f%2fwebapp.mydomain.net.br%2fowa

In console i tryed this two options, but block all the urls.

I tryed this too, but, no success.

<rule name="blocking owa" stopProcessing="true">
<match url="(.)" />
<conditions>
<add input="{URL}" pattern="(.)" />
<add input="{HTTP_HOST}" pattern="webapp.mydomain.net.br" negate="true" />
<add input="{REQUEST_URI}" pattern="/owa/logon.aspx" negate="true" />
<add input="{HTTPS}" pattern="on" negate="true" />
<add input="{QUERY_STRING}" pattern="1&url=https" negate="true" />
</conditions>
<action type="AbortRequest" />
</rule>

Answer 1

You can create a rule like below:

   <rule name="rule1" enabled="true" stopProcessing="true">  
   <match url="^owa(.*)$" />  
   <conditions>  
     <add input="{REQUEST_URI}" pattern="^/owa/auth/logon.aspx(.*)$" negate="true" />  
   </conditions>  
   <action type="AbortRequest" />  
   </rule>  

After that, all of the requests which start with https://webapp.mydomain.net.br/owa will be blocked except request start with https://webapp.mydomain.net.br/owa/auth/logon.aspx

---

If the answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi @HuryShen - MSFT ,

Thank you for your help!

Almost worked.

I did all the configuration, but, not success. I disabled the others rules one by one, but the same error occur.

This URL is working: https://webapp.mydomain.net.br/owa/healthcheck.htm (200 OK<br/>SRVCAS001.mydomain.NET.BR)

But, this URL is blocked: https://webapp.mydomain.net.br/owa/auth/logon.aspx (ERR_HTTP2_PROTOCOL_ERROR)

Any idea?

Thanks again!

Answer 3

Hi @HuryShen - MSFT ,

I got it that way:

I tryed using the specific URL bellow, but not success, is there any way to do working?!

https://webapp.mydomain.net.br/owa/auth/logon.aspx?replaceCurrent=%$2013$2021

Thanks again!

Answer 4

I did this configuration, but is opening all urls about webapp.mydomain.net.br:

<rule name="blocking rule 1" stopProcessing="true">
<match url="(.)" />
<conditions>
<add input="{URL}" pattern="(.)" />
<add input="{HTTP_HOST}" pattern="webapp.mydomain.net.br" negate="true" />
<add input="{REQUEST_URI}" pattern="/owa/auth/logon.aspx" negate="true" />
<add input="{HTTPS}" pattern="on" negate="true" />
<add input="{QUERY_STRING}" pattern="/owa/auth/logon.aspx/1234567890" negate="true" />
</conditions>
<action type="AbortRequest" />
</rule>

Answer 5

It's working after i changing the OWA url on the server IIS+ARR.

Thanks guys!