RE: Access to 127.0.0.1

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 6 Feb 2006 18:28:33 -0600

I'm referring to this cryptic reference:

"The behavior of client auto detection as configured on ISA Server has
been modified in this service pack. With Service Pack 2, a request has
to match both the IP address range and the server name or domain name
provided on the Web browser tab to bypass the proxy."

The tech writer who did that one wins the "telegraphic speech" award for
Q1 of this year :)

Tom

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
> Sent: Monday, February 06, 2006 6:22 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Access to 127.0.0.1
> 
> http://www.ISAserver.org
> 
> What in Service Pack 2 fixes the slow resolution problem? Is 
> it related
> somehow to that strange reference regarding needing to add the IP
> addresses of the domains included in the Web browser Direct 
> Access list?
> Seems like a PIA, given that I have no idea what addresses
> Microsoft.com, et al. use and when they change over time. 
> 
> Tom
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://spaces.msn.com/members/drisa/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> 
>  
> 
> > -----Original Message-----
> > From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
> > Sent: Monday, February 06, 2006 5:15 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Access to 127.0.0.1
> > 
> > http://www.ISAserver.org
> > 
> > No - not the internal network local address list - the 
> > Internal network Web Browser Direct access list.
> > Your name resolution is slow because the clients are trying 
> > to resolve using broadcasts.
> > Set (add) 
> > HKLM\System\CurrentControlSet\Services\NetBT\Parameters\NodeTy
> > pe, DWORD = 2.
> > 
> > Sp2 will fix that slow resolution problem - install it and 
> > run http://isatools.org/copylattowebproxy.js on the ISA.
> > 
> > -------------------------------------------------------
> >    Jim Harrison
> >    MCP(NT4, W2K), A+, Network+, PCG
> >    http://isaserver.org/Jim_Harrison/
> >    http://isatools.org
> >    Read the help / books / articles!
> > -------------------------------------------------------
> >  
> > 
> > -----Original Message-----
> > From: Periyasamy, Raj [mailto:Raj.Periyasamy@xxxxxxxxxxxx] 
> > Sent: Monday, February 06, 2006 15:02
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Access to 127.0.0.1
> > 
> > http://www.ISAserver.org
> > 
> > Hi Jim,
> > I tried adding the 127 to the Internal network properties - 
> > Addresses tab. And I got an error about  conflict with 
> > localhost object, and would not accept the settings. Am I 
> > doing this right?
> > 
> > I can not add any IP addresses to the Internal network 
> > properties - Web browser tab - Direct access, because our 
> > internal DNS cannot resolve Internet names. Adding any IP 
> > address in this tab, slows down the client access to Internet 
> > drastically. 
> > 
> > In the domains tab, I have our internal domain name 
> > "infineum.com", but it wont let me add an IP address in this tab.
> > 
> > 
> > 
> > Thanks.
> >  
> > Regards,
> > Raj Periyasamy
> > MCSE(Messaging), CCNA
> > 
> > 
> > 
> > 
> > -----Original Message-----
> > From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> > Sent: Monday, February 06, 2006 4:43 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Access to 127.0.0.1
> > 
> > http://www.ISAserver.org
> > 
> > This is why I asked about SP2.
> > Without SP2, you have to add 127/8 in the web proxy 
> > address/domain list.
> > After SP2, you don't, but you should run 
> > http://isatools.org/copylattowebproxy.js. 
> > 
> > 
> > -------------------------------------------------------
> >    Jim Harrison
> >    MCP(NT4, W2K), A+, Network+, PCG
> >    http://isaserver.org/Jim_Harrison/
> >    http://isatools.org
> >    Read the help / books / articles!
> > -------------------------------------------------------
> >  
> > 
> > -----Original Message-----
> > From: John T (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
> > Sent: Monday, February 06, 2006 13:31
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Access to 127.0.0.1
> > 
> > http://www.ISAserver.org
> > 
> > And 127.0.0.1 is where in that list?
> > 
> > John T
> > eServices For You
> > 
> > "Seek, and ye shall find!"
> > 
> > > -----Original Message-----
> > > From: Periyasamy, Raj [mailto:Raj.Periyasamy@xxxxxxxxxxxx]
> > > Sent: Monday, February 06, 2006 1:23 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: Access to 127.0.0.1
> > > 
> > > http://www.ISAserver.org
> > > 
> > > Hi Jim,
> > > I have populated all the internal IP address range to the address
> > list.
> > > The address list looks like below,
> > > 
> > > 10.254.0.0 - 10.254.0.255
> > > 10.254.2.0 - 10.254.255.255
> > > 10.255.255.255 - 10.255.255.255
> > > 159.70.0.0 - 159.70.255.255
> > > 159.129.0.0 - 159.129.255.255
> > > 192.168.178.0 - 192.168.178.255
> > > 
> > > I haven't installed the SP2 yet. I am still reading the 
> > release notes 
> > > document to understand the new features/changes.
> > > 
> > > 
> > > 
> > > Thanks.
> > > 
> > > Regards,
> > > Raj Periyasamy
> > > MCSE(Messaging), CCNA
> > > 
> > > 
> > > 
> > > -----Original Message-----
> > > From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> > > Sent: Monday, February 06, 2006 4:03 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: Access to 127.0.0.1
> > > 
> > > http://www.ISAserver.org
> > > 
> > > Have you populated the web proxy local addresses list?
> > > Have you installed SP2 yet?
> > > 
> > > -------------------------------------------------------
> > >    Jim Harrison
> > >    MCP(NT4, W2K), A+, Network+, PCG
> > >    http://isaserver.org/Jim_Harrison/
> > >    http://isatools.org
> > >    Read the help / books / articles!
> > > -------------------------------------------------------
> > > 
> > > 
> > > -----Original Message-----
> > > From: Periyasamy, Raj [mailto:Raj.Periyasamy@xxxxxxxxxxxx]
> > > Sent: Monday, February 06, 2006 12:47
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] Access to 127.0.0.1
> > > 
> > > http://www.ISAserver.org
> > > 
> > > We have a load balanced ISA 2004 Ent Array. Everything is working 
> > > fine, except for access to http://127.0.0.1. Some clients use the 
> > > Google desktop search, that access to the http://127.0.0.1. 
> > Every time
> > 
> > > an access is initiated to 127.0.0.1, the ISA server kicks in and 
> > > denies the connection, and the Google application fails.  
> > All clients 
> > > are using Automatic configuration from the ISA Server. I 
> > was thinking 
> > > of adding the 127.0.0.1 to the Direct access server list. 
> > However, our
> > 
> > > Internal DNS servers do not resolve Internet names. 
> Hence, I cannot 
> > > add any IP addresses in the "Directly access these servers 
> > or domains"
> > section.
> > > Access to http://localhost works fine, because localhost 
> > resolves to 
> > > "mypc.mydomain.com", and the "mydomain.com" is defined as 
> > an internal 
> > > domain. The only problem is direct access to the IP address 
> > 127.0.0.1.
> > > Any suggestions to workaround this problem?
> > > 
> > > Thanks.
> > > 
> > > Regards,
> > > Raj Periyasamy
> > > MCSE(Messaging), CCNA
> > > 
> > > 
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org 
> > Discussion List as:
> > > jim@xxxxxxxxxxxx To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > 
> > > All mail to and from this domain is GFI-scanned.
> > > 
> > > 
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org 
> > Discussion List as:
> > > raj.periyasamy@xxxxxxxxxxxx
> > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > 
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org 
> > Discussion List as:
> > > johnlist@xxxxxxxxxxxxxxxxxxx
> > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org 
> Discussion List as:
> > jim@xxxxxxxxxxxx To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org 
> Discussion List as:
> > raj.periyasamy@xxxxxxxxxxxx
> > To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion 
> > List as: jim@xxxxxxxxxxxx To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion 
> > List as: tshinder@xxxxxxxxxxxxxxxxxx
> > To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 


Other related posts: