Re: HTTP 502 Proxy Error: 12211

I would like to thank everyone who has been trying to help me resolve this
problem.   I took all of your advise and applied them with some success
but not entirely.   So... I went back and read the section called
"Configureing ISA Server for Outbound Access" (Chapter 8) in the book
called "Configuring ISA Server 2000" (by Dr. Thomas W. Shinder and
Associates - Good Book!!!) and followed the instructions on page 461 to
463 ("Routing to a Linux Squid Server").  Even thought the upstream server
is a Unix box, I followed the instructions using the wizard supplied
(Note...this was no different than what I did before).   But before I
configured this new Routine Rule, I deleted the previous one I created. 
After finishing the wizard, I when back into the configuration and removed
the "Automatic Poll Upstream Server for Array Configuration" check box
since the Unix do not use the Array Config features (as I did before).  
Also, I configured a backup Upsteam Proxy Server using same Port number
(911) but to a different IP address (question: does this make any
difference???).  I did this several times of removing and deleting the
Routing rule (out of fustration) until it finally worked!!!!   Why did it
worked, maybe we should ask Microsoft.   I beleive there is a definite bug
in ISA when configuring a Upstream Server when using a differant SSL
Tunnel.

But again, I would like to thank you for all your help....Terry Fedirko


> Port 911 is assigned to the following
> http://www.iana.org/assignments/port-numbers  :
>       xact-backup     911     tcp     911 tcp xact-backup             
>       xact-backup     911     udp     911 udp xact-backup       
> 
> Try the following:    
> SSL TUNNEL in:
>     UDP
>     Receive-send
>     Local 911
>     Remote any
>     Local computer <your DNS IP>
>     Remote Computer any
> 
>     SSL TUNNEL out:
>     TCP
>     Outbound
>     Local any
>     Remote 911
>     Local computer <your DNS IP>
>     Remote Computer any
> 
> 
> Joseph
> 
> -----Original Message-----
> From: Terry Fedirko [mailto:Terry.Fedirko@xxxxxxxxxxx] 
> Sent: Friday, February 01, 2002 6:25 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: HTTP 502 Proxy Error: 12211
> 
> http://www.ISAserver.org
> 
> 
> I am running IE 6.0 on the same ISA server purely for testing.   I
> configured IE to point to the ISA server on port 8080 (HTTP, Secure, FTP
> and Gopher).   Under ISA, I have created a SSL Tunnel port 911 to talk
> to
> one of the upstream proxy server which is a UNIX base system.  I do not
> understand why they use 911 but thats how they configured it.  If I
> tried
> using IE on a different computer accessing the same ISA server, I still
> get the same result.
> 
> One note of interest.  I am testing another ISA Server on a different
> system using the same configuration (more or less) that points to the
> same
> upstream proxy server.  Somehow (and I don't know why) I was able to
> access the Intranet but still unable to access the Internet.  After a
> short time, I keep getting a 10060 (permission denied) or 10065 (Host
> Unreachable).
> 
> Again, I need help.  Any suggestions or ideas????   Terry
> 
> 
> > Is IE 6.0 on the ISA server?  Are you looking at your own sites or an
> > external site?
> > 
> > -----Original Message-----
> > From: Terry Fedirko [mailto:Terry.Fedirko@xxxxxxxxxxx] 
> > Sent: Thursday, January 31, 2002 1:45 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Re: HTTP 502 Proxy Error: 12211
> > 
> > http://www.ISAserver.org
> > 
> > 
> > I did configure the SSL Tunneling using port 911 recommended by
> Mcrosoft
> > Q283284.  After running this script, I checked the registry and found
> > that
> > the new port has been added (so far so good).   I rebooted the machine
> > (just to be on the safe side) and started up the Internet Explorer
> > (6.0). 
> >  When trying to access a URL, I'm still getting the same old HTTP 502
> > 12211 error message.   I even try to re-install the ISA Enterprise
> > (including SP1 - Note:  SP2 has been installed on Window 2000) and
> still
> > no go.  I even remove the SSL 443 and 563 tunnel port from the
> registry
> > but again the same result.  This is starting to become a real headache
> > and
> > ready to throw this product out!!!   I cannot understand why Microsoft
> > develop a product that seems so simple to configure but difficult to
> > debug
> > (a typical Microsoft way).  Any other suggestions, ideas????  Thank
> you.
> >  
> > 
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > cismic@xxxxxxx
> > To unsubscribe send a blank email to
> $subst('Email.Unsub')
> 
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> cismic@xxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: