Re: Emergency help: firewall client on MS ISA 2K problem!

  • From: Jim Harrison <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 16 Jun 2004 22:31:46 -0700

Certainly.
I'll be interested in both ipconfig outputs, as well.
The IPConfig in ISAInfo is my scripted answer to the utility that comes with 
Windows.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Thu, 17 Jun 2004 08:27:49 +0700
 krisnak@xxxxxxxxxxxxxxx wrote:
http://www.ISAserver.org


Dear Jim

Could i send you the ISAInfo directly to your personal email instead of 
sending the forum as public?

After running your tool, i found yours IPConfig /all  is different from mine 
(ipconfig /all in my server command promp)

your also display my old setting (used previous internet connection)

hope your understand my concern.

thanks
krisna

Quoting Jim Harrison <jim@xxxxxxxxxxxx>:

> http://www.ISAserver.org
> 
> Two more things:
> 1 - make sure the Outgoing web requests listener is set to "all IP internal
> addresses"
> 2 - check your web proxy logs for those requests; what is the sc-result
> code?
> 
> Can you send your ISAInfo?
> http://isatools.org/isainfo.vbe
> Run it on the ISA server and respond with the results.
> 
> 
>  Jim Harrison
>  MCP(NT4, W2K), A+, Network+, PCG
>  http://www.microsoft.com/isaserver
>  http://isaserver.org/Jim_Harrison
>  http://isatools.org
> 
>  Read the help, books and articles!
> ----- Original Message ----- 
> From: <krisnak@xxxxxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Wednesday, June 16, 2004 11:15
> Subject: [isalist] Re: Emergency help: firewall client on MS ISA 2K
> problem!
> 
> 
> http://www.ISAserver.org
> 
> Dear Jim,
> 
> After remove the FC and restart my server, then set the browser proxy to 
> 127.0.0.1:8080 it still not working. :-(
> 
> Any more idea, please.
> Thanks
> Krisna
> 
> Quoting Jim Harrison <jim@xxxxxxxxxxxx>:
> 
> > http://www.ISAserver.org
> > 
> > Hi Krisna,
> > 
> > If you're trying to surf from the ISA / DC itself, then :
> > 1 - remove the Firewall client (http://support.microsoft.com/?id=304919)
> > 2 - set the browser proxy settings so that it uses 127.0.0.1:<listener>
> > 
> > Replace <listener> with the port used by the internal clients.
> > 
> >   Jim Harrison
> >   MCP(NT4, W2K), A+, Network+, PCG
> >   http://isaserver.org/Jim_Harrison/
> >   http://isatools.org
> >   Read the help / books / articles!
> > 
> > 
> > On Wed, 16 Jun 2004 21:09:38 +0700
> >  krisnak@xxxxxxxxxxxxxxx wrote:
> > http://www.ISAserver.org
> > 
> > http://www.ISAserver.org
> > 
> > Dear All,
> > 
> > I have one server running as DC 2NICs( 1st one for Local IP, 2nd one for
> > getting
> > the IP from the DSL dialup connection) , Mail server (ms exchange 2k sp4)
> and
> > 
> > Internet Connection & sharing(MS ISA 2k sp2)
> > 
> > after switching to DSL for my internet connection. I meet some problem
> with
> > the 
> > surfing internet. i have created the dsl conneciton end configure the
> Dailup
> > 
> > Entry, Network configureation and Routing in the MSA already.
> > 
> > My server machine need a firewall client when surfing internet, while my 
> > clients (ms windows XP) can surf with/without it and with proxy setting.
> My
> > 
> > local Intranet is working fine(surfing 
> > on the server when firewall disable/enable)
> > 
> > + With firewall client disable on the Server:
> >   - Can not surf internet reply with a message: 
> >      The page can not be found
> >      -------------
> >      -------------
> >      -------------
> >      Cannot find server or DNS Error
> >      Internet Explorer
> >   - the Symantec NAV can update its definition, but the POPCon 2.92 can
> not
> > 
> > download the Virus definition.
> >   
> > + With firewall client enable on ther server:
> >   - Can surf internet (with/without proxy)
> >   - the Symantec NAV still can update its def, the POPCon 2.92 can
> download
> > its
> > virus defition.
> > 
> >   - But the DSN does not working sometime with restarting, and also
> display
> > the
> > warning message "Atleast one service failed during start up, check the
> Event
> > 
> > Viewer to see.." and The DNS error is
> > "--------------------------------------------------
> > Event Type: Error
> > Event Source: DNS
> > Event Category: None
> > Event ID: 408
> > Date: 6/15/2004
> > Time: 7:45:55 AM
> > User: N/A
> > Computer: SERVER
> > Description:
> > The DNS server could not open socket for address 0.0.0.0. 
> > Verify that this is a valid IP address for the server computer.  
> > If it is NOT valid use the Interfaces dialog under Server Properties in 
> > the DNS Manager to remove it from the list of IP interfaces.  Then stop
> and
> > 
> > restart the DNS server. (If this was the only IP interface on this
> machine
> > and 
> > the DNS server may not have started as a result of this error.  In that
> case
> > 
> > remove 
> > the DNS\Parmeters\ ListenAddress value in the services section of the
> > registry 
> > and restart.) 
> >  
> > If this is a valid IP address for this machine, make sure that no other 
> > application 
> > (e.g. another DNS server) is running that would attempt to use the DNS
> port.
> > 
> >  
> > For more information, see "DNS server log reference" in the online Help. 
> > "-----------------------------------------------------------
> > 
> > And the DNS is service is stop, but after manually restart, it works
> fine.
> > 
> > Just a moment ago. there is another problem come: my clients can not surf
> the
> > 
> > internet unless using the internal ip address for the proxy in IE, while 
> > sending mail throw exchange can use my server name (ms outlook
> xp,configure
> > to 
> > be a exchange client); and pinging to my server name it reply the internal
> ip
> > 
> > address.
> > 
> > Any helps would be appreciating.
> > 
> > Thanks
> > Krisna
> > 
> > Ps: My staffs can send/receive email properly (as the Ms Exchange clients
> and
> > 
> > POP 3)
> > 
> >  
> > 
> > 
> > 
> > 
> > 
> > > You are currently subscribed to this ISAserver.org Discussion List as:
> > > krisnak@xxxxxxxxxxxxxxx
> > > To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > 
> > 
> > 
> > 
> > -------------------------------------------------
> > Get your free email account with : 
> > http://www.everyday.com.kh
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > jim@xxxxxxxxxxxx
> > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > krisnak@xxxxxxxxxxxxxxx
> > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > 
> 
> 
> 
> -------------------------------------------------
> Get your free email account with : 
> http://www.everyday.com.kh
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> krisnak@xxxxxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> 



-------------------------------------------------
Get your free email account with : 
http://www.everyday.com.kh

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist


Other related posts: