Mac® Security Bible

31.6. Securing the Mobile Access Server

New in Snow Leopard Server is Mobile Access Server, which gives remote users a way to securely access certain services (specifically, IMAP, SMTP, and any service that uses HTTP, such as the web server, iCal Server, and Address Book Server) by way of a reverse proxy server — without the need for a VPN. The Mobile Access server always uses SSL to encrypt data sent and received over the Internet.

To configure the Mobile Access Server, follow these steps:

1. Open Server Admin, which is located in /Applications/Server.

2. In the sidebar on the left, select your server.

3. If no services are listed under the server name, click the disclosure triangle next to the server name to reveal them.

4. If the service names are dimmed, choose Server Connect, type your username and password if they're not already filled in, and then click Connect. The list of services refreshes, and those currently running appear with a green dot next to them.

5. In the sidebar under your server name, select Mobile Access. If Mobile Access doesn't appear in the list, you must first add it by selecting your server name, clicking Settings, clicking Services, clicking the check box next to Mobile Access, and then clicking Save.

6. Click the Settings button on the toolbar, shown in Figure 31.11.

7. To use Mobile Access to forward Address Book requests, follow these steps:

   1. Click the Forward Address Book traffic ...