Re: How do IE & ISA use DNS...?
- From: Jim Harrison <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 26 Sep 2003 05:59:11 -0700
There are three answers to this:
* IE as WP client:
IE defers to ISA for all name resolution (CERN proxy requests), which
procedes like:
- w3proxy DNS cache, Windows name resolution process
* IE as FW client:
IE performs its own name resolution with the help of fwsrv, which procedes
like:
- fwsrv DNS cache, Windows name resolution process
* IE as SecureNAT client:
IE performs its own name resolution:
- Windows name resolution process
It's not specific to IE, but operates like this for any CERN-aware app.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
On Fri, 26 Sep 2003 14:03:55 +0200
"William Robertson" <robertson.william@xxxxxxxxxxxxxx> wrote:
http://www.ISAserver.org
Hi there
I have a WAN link to a parent company who hosts a server which I wish to
access via the WAN link as opposed to the slow public internet connection.
All the routers have been configured to route traffic via the WAN link
instead of via the internet.
I now host a secondary DNS zone to my parent company in which the private IP
Address of the web server is listed, and when I do an NSLOOKUP, TRACERT,
PING etc I always connect via the private IP Address over the WAN link.
But when I try to use Internet Explorer to access the website I essentially
get timeouts and can never connect to the actual website. My theory now is
that when I try to access the website, my Internet Explorer (along with ISA
I presume) does not query my local DNS Server for the IP Address of the
website, but rather appears to receive the public IP Address of the website
(How..? I don't know!!), and that is why I believe my connection times out
because I try to access the site from the internet, and the routers on that
side then try to route the traffic back across the WAN link thus creating an
invalid session and thus it fails.
The DNS is setup as follows:
- My PC looks to internal DNS server
- Internal NIC of ISA looks to Internal DNS Server
- External NIC of ISA has no DNS settings
- DNS Server configured to use ISP's DNS servers as forwarders
Can anyone perhaps shed some light on this for me please?
Thanks
William R.
---------------------------------------------------------------------
Everything in this e-mail and attachments relating to the official
business of Columbus Stainless is proprietary to the company. It is
confidential, legally privileged and protected by law. Columbus
Stainless does not own and endorse any other content. Views and
opinions are those of the sender unless clearly stated as being that
of Columbus Stainless. The person addressed in the e-mail is the sole
authorised recipient. Please notify the sender immediately if it has
unintentionally reached you and do not read, disclose or use the
content in any way. Whilst all reasonable steps are taken to ensure
the accuracy and integrity of information and data transmitted
electronically and to preserve the confidentiality thereof, no
liability or responsibility whatsoever is accepted if information or
data is,for whatever reason, corrupted or does not reach its intended
destination.
---------------------------------------------------------------------
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*
All mail from this domain is virus-scanned with RAV.
www.ravantivirus.com
^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*
Other related posts:
