RE: No SSL, Clients Don't work
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 24 Mar 2003 23:10:10 -0600
Hi David,
What I was thinking of is discussed in this article:
Name Resolution and Connectivity Issues on Windows 2000 Domain
Controller with Routing and Remote Access and DNS Installed (Q292822)
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: David Mineer [mailto:davemineer@xxxxxxx]
Sent: Monday, March 24, 2003 11:05 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: No SSL, Clients Don't work
http://www.ISAserver.org
The DNS addresses that are being registered which I can see in
the zones look correct. Each machine is as I would expect and nothing
that surprises me or anything. By bogus do you mean totally off the
wall addresses or incorrect variations of my machine names?
I did make some progress before I left the office after posting
my original message. After adding a Site and content rule with a client
set which I created consisting of the range of IP addresses for my Local
machines, they now function correctly as clients(MSN Messenger, Online
Banking, etc). Which leads me to believe that it is a domain logon
issue. Any ideas there. May be off topic for this NG, but perhaps you
someone can offer some suggestions. How do I verify Logons. Connection
Types are listed as "windows" for all my machines that are logged on.
Also, on the bridging tab of My Web Publishing Rule, Under the
"Redirect SSL Requests as:" section I checked "HTTP Requests" instead of
"SSL Requests" and my SSL pages now work from Outside. However, from
the inside I still get the "HTTP 502 Proxy Error". Which is what I get
from inside and outside with the "SSL Requests" Option checked.
TIA,
David Mineer
----- Original Message -----
From: Thomas W Shinder
<mailto:tshinder@xxxxxxxxxxxxxxxxxx>
To: [ISAserver.org Discussion List]
<mailto:isalist@xxxxxxxxxxxxx>
Sent: Monday, March 24, 2003 7:07 PM
Subject: [isalist] RE: No SSL, Clients Don't work
http://www.ISAserver.org
Hi David,
If you're running SBS, you have a DNS server on the
machine, and its probably registering bogus address in the DNS. Am I
close?
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: David Mineer [mailto:davemineer@xxxxxxx]
Sent: Monday, March 24, 2003 5:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] No SSL, Clients Don't work
http://www.ISAserver.org
Friday morning, life was great. My website was
working. I could connect to the secure pages using SSL. Clients
connected just fine using a combination of web proxy and secure nat.
MSN messenger logon was automatic. Other programs we use connected fine
(Credit card verification etc..). Then, I rebooted. Got the Proxy
Chain Loop error on every page I tried to access, both from inside and
outside the isa server. I am running SBS 2000. I know that aint the
greatest but it worked great until the reboot friday morning.
Being Unable to work around the chain loop error
I ran the ICW (Internet Connection Wizard). Got the web site back up
and running. However, I cannot get SSL working. I have Tom's Book and
although that seemed to get it working last time, this time it does not.
Also, my workstations in the office can't connect to MSN messenger and I
had to change the proxy setting and actually include our local domain in
the list for "Bypass proxy server for Local domains" which I didn't have
to do before. Simply checking the box was enough. I get the feeling
that the secure nat isn't working properly because last time Everything
went great once that seemed to work.
Any ideas are appreciated.
My clients to dhcp and have the sbs server as
the gateway. How else do I verify securenat connectivity?
How do I change web proxy settings on the
server. I did get some unable to pind to 127.0.0.1 errors, althought I
don't see them since the last reboot.
Anyway, I am confused and frustrated. I usually
figure things out fairly quickly but since the upgrade to sbs 2000 about
3 weeks ago I haven't had much peace. I can only cross my fingers.
TIA,
---------------------
David Mineer
---------------------
Don't wish it was easier; wish you were better.
Don't wish for less problems; wish for more
skills.
Don't wish for less challenges; wish for more
wisdom.
Other related posts:
