Re: ISA Server on same machine as IIS
- From: "Paul Nuernberger" <pen@xxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 17 Oct 2003 12:48:42 -0500
You need to run the "Configure Internet Information Services" wizard from
the Administrator Console MMC (top of Start Menu). The To Do List will
quickly become your best friend, as will that console, in SBS. Running
through the wizards & tasks in the To Do List is mandatory fro proper &
secure operation of SBS.
Paul Nuernberger
-----Original Message-----
From: James May [mailto:Jmay@xxxxxxxxxxxxx]
Sent: Thursday, October 16, 2003 11:14 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server on same machine as IIS
http://www.ISAserver.org
I had the same problem when I set up SBS,currently I am doing what Paul is
saying not to do relying on packet filters.... maybe I can lean something
here. Maybe I went wrong when I didn't use the wizard? I got my website up
and running fine both internal and external using destination sets or
publishing where I ran into trouble is I couldn't get OWA working on the
remote side unless I published it using port 80 this is not recommended in
the isa server book or on the isaserver.org site.
Here is my config
Split DNS disabled socket pooling w3svc service ftp and smtp.
Website assigned the public ip and the host A records for www pointing to
public on the internal DNS server ip packet filters for created for the ip.
The problem here internal web access loops around the fire wall. Jim
-----Original Message-----
From: Paul Nuernberger [mailto:pen@xxxxxxxxx]
Sent: Thursday, October 16, 2003 8:44 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server on same machine as IIS
http://www.ISAserver.org
If you followed the wizards properly, then the setup would have removed
'socket pooling' for IIS so that it only listens on the internal interface
(it would have asked you for the IP address of the internal interface).
This being the case, you would have to 'publish' your web site in ISA using
web publishing (& preferably also use a destination set to limit what ISA
passes to IIS). It would also be a good thing to look at what headers your
IIS site is looking for (i.e. www.mysite.tld and mysite.tld), and make sure
to pass the original headers to IIS (in web publishing). Review the docs
and help file, as well as stuff at www.isaserver.org, and you will see how
these all work together.
If you are relying on using packet filters to get to your IIS web site -
don't. Only use web publishing.
Paul Nuernberger
-----Original Message-----
From: DH [mailto:david.harkins@xxxxxxxxxxxxxxxxx]
Sent: Thursday, October 16, 2003 10:35 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server on same machine as IIS
http://www.ISAserver.org
Sorry that should read SBS (Small business server) not SDS. It's a standard
install and I can't access my website outwith the network. I do have a
public IP for the website and it is configured on DNS, can view it
internally. Thanks.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security Resource
Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jmay@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server Resource Site: http://www.msexchange.org Windows Security Resource
Site: http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
pen@xxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
