Re: HTTP 502 Proxy Error: 12211
- From: "Terry Fedirko" <Terry.Fedirko@xxxxxxxxxxx>
- To: isalist@xxxxxxxxxxxxx
- Date: Tue, 5 Feb 2002 07:42:44 -0700
ADDENDUM:
- Applies only to Routing Rules with an Upstream Server -
After playing around with the Routing Rule and the SSL Tunnel Port, I
found a simple solution to this problem while testing out on a different
ISA Server with the same properties. By following the simple steps below
in the EXACT order, there should be no problems:
1. Remove any Routing Rule that will contains the new
SSL Tunnel Port Number (if any)
2. Configure a new SSL Tunnel Port using Microsoft Q283284 procedure
3. (Re-)Install the new Routing Rule that will be using the new port
number
If you apply the Rule first before adding the SSL Tunnel port, the Routing
Rule WILL NOT WORK.
Again, whether this is a simple bug or not, Microsoft should address this
problem in their document or as a fix.
Again, Thank You for your Support....Terry
> I would like to thank everyone who has been trying to help me resolve this
> problem. I took all of your advise and applied them with some success
> but not entirely. So... I went back and read the section called
> "Configureing ISA Server for Outbound Access" (Chapter 8) in the book
> called "Configuring ISA Server 2000" (by Dr. Thomas W. Shinder and
> Associates - Good Book!!!) and followed the instructions on page 461 to
> 463 ("Routing to a Linux Squid Server"). Even thought the upstream server
> is a Unix box, I followed the instructions using the wizard supplied
> (Note...this was no different than what I did before). But before I
> configured this new Routine Rule, I deleted the previous one I created.
> After finishing the wizard, I when back into the configuration and removed
> the "Automatic Poll Upstream Server for Array Configuration" check box
> since the Unix do not use the Array Config features (as I did before).
> Also, I configured a backup Upsteam Proxy Server using same Port number
> (911) but to a different IP address (question: does this make any
> difference???). I did this several times of removing and deleting the
> Routing rule (out of fustration) until it finally worked!!!! Why did it
> worked, maybe we should ask Microsoft. I beleive there is a definite bug
> in ISA when configuring a Upstream Server when using a differant SSL
> Tunnel.
>
> But again, I would like to thank you for all your help....Terry Fedirko
>
>
> > Port 911 is assigned to the following
> > http://www.iana.org/assignments/port-numbers :
> > xact-backup 911 tcp 911 tcp xact-backup
> > xact-backup 911 udp 911 udp xact-backup
> >
> > Try the following:
> > SSL TUNNEL in:
> > UDP
> > Receive-send
> > Local 911
> > Remote any
> > Local computer <your DNS IP>
> > Remote Computer any
> >
> > SSL TUNNEL out:
> > TCP
> > Outbound
> > Local any
> > Remote 911
> > Local computer <your DNS IP>
> > Remote Computer any
> >
> >
> > Joseph
> >
> > -----Original Message-----
> > From: Terry Fedirko [mailto:Terry.Fedirko@xxxxxxxxxxx]
> > Sent: Friday, February 01, 2002 6:25 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Re: HTTP 502 Proxy Error: 12211
> >
> > http://www.ISAserver.org
> >
> >
> > I am running IE 6.0 on the same ISA server purely for testing. I
> > configured IE to point to the ISA server on port 8080 (HTTP, Secure, FTP
> > and Gopher). Under ISA, I have created a SSL Tunnel port 911 to talk
> > to
> > one of the upstream proxy server which is a UNIX base system. I do not
> > understand why they use 911 but thats how they configured it. If I
> > tried
> > using IE on a different computer accessing the same ISA server, I still
> > get the same result.
> >
> > One note of interest. I am testing another ISA Server on a different
> > system using the same configuration (more or less) that points to the
> > same
> > upstream proxy server. Somehow (and I don't know why) I was able to
> > access the Intranet but still unable to access the Internet. After a
> > short time, I keep getting a 10060 (permission denied) or 10065 (Host
> > Unreachable).
> >
> > Again, I need help. Any suggestions or ideas???? Terry
> >
> >
> > > Is IE 6.0 on the ISA server? Are you looking at your own sites or an
> > > external site?
> > >
> > > -----Original Message-----
> > > From: Terry Fedirko [mailto:Terry.Fedirko@xxxxxxxxxxx]
> > > Sent: Thursday, January 31, 2002 1:45 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] Re: HTTP 502 Proxy Error: 12211
> > >
> > > http://www.ISAserver.org
> > >
> > >
> > > I did configure the SSL Tunneling using port 911 recommended by
> > Mcrosoft
> > > Q283284. After running this script, I checked the registry and found
> > > that
> > > the new port has been added (so far so good). I rebooted the machine
> > > (just to be on the safe side) and started up the Internet Explorer
> > > (6.0).
> > > When trying to access a URL, I'm still getting the same old HTTP 502
> > > 12211 error message. I even try to re-install the ISA Enterprise
> > > (including SP1 - Note: SP2 has been installed on Window 2000) and
> > still
> > > no go. I even remove the SSL 443 and 563 tunnel port from the
> > registry
> > > but again the same result. This is starting to become a real headache
> > > and
> > > ready to throw this product out!!! I cannot understand why Microsoft
> > > develop a product that seems so simple to configure but difficult to
> > > debug
> > > (a typical Microsoft way). Any other suggestions, ideas???? Thank
> > you.
> > >
> > >
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List as:
> > > cismic@xxxxxxx
> > > To unsubscribe send a blank email to
> > $subst('Email.Unsub')
> >
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > cismic@xxxxxxx
> > To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
