RE: Host Server Unreachable

Hey now, Bellingham, WA is only 30 minutes south of Canada, but I still have
to pay for my health care!

-Wayne

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Thursday, April 21, 2005 10:25 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable

http://www.ISAserver.org

Costs more in Canada  


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: TRadtke@xxxxxxxxxxxx [mailto:TRadtke@xxxxxxxxxxxx] 
Sent: Thursday, April 21, 2005 12:20 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable

http://www.ISAserver.org

Wow, they only charged me $245 on Monday..... Dang inflation....

-----Original Message-----
From: Wayne Berry [mailto:wayne@xxxxxxxxxx] 
Sent: Thursday, April 21, 2005 12:17 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable


http://www.ISAserver.org

Well I just called Microsoft Support and open and incident
SRX050421602575,
it cost me $265 to get this solved.  I am waiting on Hold for Customer
Support, they are reporting a wait of 3 hours and there are 3 people in
the
queue right now.

-Wayne

-----Original Message-----
From: Wayne Berry [mailto:wayne@xxxxxxxxxx] 
Sent: Tuesday, April 19, 2005 12:42 PM
To: '[ISAserver.org Discussion List]'
Subject: RE: [isalist] RE: Host Server Unreachable

Tom,

Here is the issue:

From My Internal Network I am trying to connect to a web site that is
across
the VPN to the Remote Network.  However, because ISA 2004 doesn't see
the
Remote Network it doesn't know how to make a proxy request for it.  So I
thought it the Local Host network could get to the Remote Network then I
could get pages from those web sites on my Internal Network.

DNS For All Networks on the Remote Network.  The Only Network that Can't
get
to the DNS is the Local Host.

Web Site Is On the Remote Network, Both the Internal (Across ISA As a
Proxy)
and the Local Host Can't Access the Web Site.  If I don't use ISA as a
Proxy
-- i.e. make an SSL connection, there is no problem accessing the web
site
on the Remote Network from the Internal Network.

This is what was in my ISA Log when trying to connect from the Internal
Network to the Web Site on the Remote Network:

#Fields: c-ip      cs-username     c-agent date      time
s-computername            cs-referred         r-host    r-ip
r-port
time-taken         cs-bytes            sc-bytes            cs-protocol
s-operation        cs-uri    s-object-source  sc-status            rule
FilterInfo            cs-Network        sc-Network        error-info
action

10.2.1.1            anonymous       Mozilla/4.0 (compatible; MSIE 6.0;
Windows NT 5.1; SV1; .NET CLR 1.0.3705)      2005-04-13
18:24:55
GATEWAY        -           10.0.0.22           10.0.0.22           80
20922   438       2185     http       GET            http://10.0.0.22/
Inet
10065   All Access - Crown Plaza To FiberCloud  -           Internal
FiberCloud         0x40            Failed

Jim said that this ment:

"That's a failure attempt - the error code is 10065 (Winsock error),
indicating that the upstream server was unreachable."

Which lead me to believe that the Local Host (The ISA Server) doesn't
know
how to get to the Remote Network, which it doesn't when testing on the
ISA
2004 server with a browser.


-Wayne

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Tuesday, April 19, 2005 12:20 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable

http://www.ISAserver.org

Hi Wayne,

There shouldn't be any reason for the local host network to get to the
remote network.  


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Wayne Berry [mailto:wayne@xxxxxxxxxx] 
Sent: Tuesday, April 19, 2005 2:17 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable

http://www.ISAserver.org

No PIX 515 on the FiberCloud (Rack Side) and ISA 2004 on Office Side
(Crown
Plaza).  The strange thing is that everything works from Internal, no
problems, it is just the Local Host that is having trouble getting
across
the VPN.

Should I just shoot myself now?  

-Wayne

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Tuesday, April 19, 2005 12:12 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable

http://www.ISAserver.org

Hi Wayne,

Is there an ISA firewall on each end?  


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Wayne Berry [mailto:wayne@xxxxxxxxxx] 
Sent: Tuesday, April 19, 2005 2:06 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable

http://www.ISAserver.org

Dan,

I think you are right, it is probably something about the IPSec
connection.
I wonder if it is because it is Terminating on the External Network?
Maybe
the Local Host needs Access the External network?

-Wayne

-----Original Message-----
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] 
Sent: Tuesday, April 19, 2005 10:11 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable

http://www.ISAserver.org

Sorry, I haven't set up any IPSec connections like you have, so I'm
afraid I can't be of much help to you.

-----Original Message-----
From: Wayne Berry [mailto:wayne@xxxxxxxxxx] 
Sent: Tuesday, April 19, 2005 12:45
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable

http://www.ISAserver.org

Dan,

I check this and took some screen shots:

http://www.berryintl.com/isa/prob1.bmp
http://www.berryintl.com/isa/prob2.bmp
http://www.berryintl.com/isa/prob3.bmp

It appears to me in my limited knowledge that I have all the firewall
access
rules set up so that I should be able to Ping the machines at
FiberCloud,
however you can see my Ping results.

Even if Ping didn't work I should be able to access the DNS server at
10.0.0.21 at FiberCloud, however I am getting DNS timeout on nslookup

For some reason my localhost rules are not working like they should.

-0Wayne

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wayne@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wayne@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wayne@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tradtke@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wayne@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



Other related posts: