RE: No SSL, Clients Don't work
- From: "David Mineer" <davemineer@xxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 24 Mar 2003 22:05:03 -0700
MessageThe DNS addresses that are being registered which I can see in the zones
look correct. Each machine is as I would expect and nothing that surprises me
or anything. By bogus do you mean totally off the wall addresses or incorrect
variations of my machine names?
I did make some progress before I left the office after posting my original
message. After adding a Site and content rule with a client set which I
created consisting of the range of IP addresses for my Local machines, they now
function correctly as clients(MSN Messenger, Online Banking, etc). Which leads
me to believe that it is a domain logon issue. Any ideas there. May be off
topic for this NG, but perhaps you someone can offer some suggestions. How do
I verify Logons. Connection Types are listed as "windows" for all my machines
that are logged on.
Also, on the bridging tab of My Web Publishing Rule, Under the "Redirect SSL
Requests as:" section I checked "HTTP Requests" instead of "SSL Requests" and
my SSL pages now work from Outside. However, from the inside I still get the
"HTTP 502 Proxy Error". Which is what I get from inside and outside with the
"SSL Requests" Option checked.
TIA,
David Mineer
----- Original Message -----
From: Thomas W Shinder
To: [ISAserver.org Discussion List]
Sent: Monday, March 24, 2003 7:07 PM
Subject: [isalist] RE: No SSL, Clients Don't work
http://www.ISAserver.org
Hi David,
If you're running SBS, you have a DNS server on the machine, and its probably
registering bogus address in the DNS. Am I close?
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: David Mineer [mailto:davemineer@xxxxxxx]
Sent: Monday, March 24, 2003 5:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] No SSL, Clients Don't work
http://www.ISAserver.org
Friday morning, life was great. My website was working. I could connect
to the secure pages using SSL. Clients connected just fine using a combination
of web proxy and secure nat. MSN messenger logon was automatic. Other
programs we use connected fine (Credit card verification etc..). Then, I
rebooted. Got the Proxy Chain Loop error on every page I tried to access, both
from inside and outside the isa server. I am running SBS 2000. I know that
aint the greatest but it worked great until the reboot friday morning.
Being Unable to work around the chain loop error I ran the ICW (Internet
Connection Wizard). Got the web site back up and running. However, I cannot
get SSL working. I have Tom's Book and although that seemed to get it working
last time, this time it does not. Also, my workstations in the office can't
connect to MSN messenger and I had to change the proxy setting and actually
include our local domain in the list for "Bypass proxy server for Local
domains" which I didn't have to do before. Simply checking the box was enough.
I get the feeling that the secure nat isn't working properly because last time
Everything went great once that seemed to work.
Any ideas are appreciated.
My clients to dhcp and have the sbs server as the gateway. How else do I
verify securenat connectivity?
How do I change web proxy settings on the server. I did get some unable to
pind to 127.0.0.1 errors, althought I don't see them since the last reboot.
Anyway, I am confused and frustrated. I usually figure things out fairly
quickly but since the upgrade to sbs 2000 about 3 weeks ago I haven't had much
peace. I can only cross my fingers.
TIA,
---------------------
David Mineer
---------------------
Don't wish it was easier; wish you were better.
Don't wish for less problems; wish for more skills.
Don't wish for less challenges; wish for more wisdom.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
davemineer@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
