ISA 2006

[mattstevenson2005]

Hi Everyone

 

I have an ISA setup as our gateway to the internet and i am trying to use the web publishing feature but i am having a few problems with it. When i try and access an internal web server from the actual ISA server it cannot find the page, therefore the web publishing for that site doesnt work. Does anybody have any idea why the ISA cannot access the internal web pages. Both the ISA and the web server can see and access each other e.g. through file shares/ping etc.. but just cant access the actual web page.

 

The ISA has two network cards in, one internal and one external

 

Internal

 

172.16.0.10 IP Address

255.255.0.0 Subnet

NO Default Gateway

172.16.0.1 Primary DNS

172.16.0.3 Secondary DNS

 

External - DETAILS SUPPLIED BY LEA

10.15.80.14 IP Address

255.255.0.0 Subnet

10.15.3.254 Default Gateway

10.15.250.160 Primary DNS

10.15.250.161 Secondary DNS

 

Every thing else seams to work internet access is fine, its just accessing the internal web servers and web publishing that im having problems with

 

Cheers

 

Matt

[spc-rocket]

Hi Everyone

 

I have an ISA setup as our gateway to the internet and i am trying to use the web publishing feature but i am having a few problems with it. When i try and access an internal web server from the actual ISA server it cannot find the page, therefore the web publishing for that site doesnt work. Does anybody have any idea why the ISA cannot access the internal web pages. Both the ISA and the web server can see and access each other e.g. through file shares/ping etc.. but just cant access the actual web page.

 

The ISA has two network cards in, one internal and one external

 

Internal

 

172.16.0.10 IP Address

255.255.0.0 Subnet

NO Default Gateway

172.16.0.1 Primary DNS

172.16.0.3 Secondary DNS

 

External - DETAILS SUPPLIED BY LEA

10.15.80.14 IP Address

255.255.0.0 Subnet

10.15.3.254 Default Gateway

10.15.250.160 Primary DNS

10.15.250.161 Secondary DNS

 

Every thing else seams to work internet access is fine, its just accessing the internal web servers and web publishing that im having problems with

 

Cheers

 

Matt

 

Hi,

 

You should not use DNS servers on the external NIC but instead configure forwarders to point to your ISP's DNS servers on your internal DCs to answer or relay the DNS queries.

 

You will need an access to to allow DNS protocol from your internal DC (the one with the forwarders set) to external or your ISP's DNS server.

 

Believe me it will solve a lot of other problems that you have not encountered yet.

 

Ash.

[mattstevenson2005]

Hi Ash

 

Thanks for the answer, im not quite sure what you mean. Because of the way our internet is supplied by the local council our internal DCs cannot 'see' any 10.15 address. We use the ISA to NAT all traffic from the 10.15 network to our internal network. I already have a forwarder setup to point to an external DNS server on our main DC which is also our primary DNS server

 

Cheers

 

Matt

[mattstevenson2005]

Thanks, i have worked it out. It was because the default web chaining rule was forwarding all requested up to the upstream LEA proxy and not resolving local addresses internally LOL my fault

 

Cheers

 

Matt