RE: No internet or ability to connect front-end owa to active directory...isa2k4
- From: MarvinC <marvinc@xxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Sun, 12 Jun 2005 22:22:36 -0400
Internal - South NIC:
IP: 10.0.0.6
Subnet: 255.0.0.0
Gateway:
Policies Created for this configuration:
All Open DMZ - South
FEBE Outbound SMTP-DNS
ExFe - ExBe Access Rule
My Application event logs show the following two warnings of concern:
Warning:
ISA Server detected routes through adapter "North - External" that do
not correlate with the network element to which this adapter belongs.
The address ranges in conflict are:
0.0.0.1-9.255.255.255;11.0.0.0-65.14.248.2;65.14.248.4-68.219.235.22;68.219.235.24-68.255.255.254;69.0.0.0-70.148.240.119;70.148.240.128-70.255.255.254;71.0.0.0-126.255.255.255;128.0.0.0-172.15.255.255;172.17.0.0-208.61.22.28;208.61.22.30-208.61.22.254;208.61.23.0-223.255.255.255;240.0.0.0-255.255.255.254;65.14.248.3-65.14.248.3;.
Fix the network element and/or the routing table to make these ranges
consistent; they should be in both or in neither. If you recently
created a remote site network, check if the event recurs. If it does
not, you may safely ignore this message.
Warning:
ISA Server detected routes through adapter "DMZ" that do not correlate
with the network element to which this adapter belongs. The address
ranges in conflict are:
65.14.248.3-65.14.248.3;68.219.235.23-68.219.235.23;68.255.255.255-68.255.255.255;.
Fix the network element and/or the routing table to make these ranges
consistent; they should be in both or in neither. If you recently
created a remote site network, check if the event recurs. If it does
not, you may safely ignore this message.
???
> What IP ranges are included in your "Internal" network?
> What policies have you created?
> What warning or error events show in the event logs?
>
> -----Original Message-----
> From: MarvinC [mailto:marvinc@xxxxxxxxx]
> Sent: Sunday, June 12, 2005 6:15 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: No internet or ability to connect front-end owa
> to active directory...isa2k4
>
> http://www.ISAserver.org
>
> Yeah, that's what I meant, North is my external NIC and that has the
> only gateway. aaarrrghh!!!!
>
> On 6/12/05, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
> > http://www.ISAserver.org
> >
> > No; external = north, or Internet NIC...
> >
> > -----Original Message-----
> > From: MarvinC [mailto:marvinc@xxxxxxxxx]
> > Sent: Sunday, June 12, 2005 6:03 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: No internet or ability to connect front-end owa
> > to active directory...isa2k4
> >
> > http://www.ISAserver.org
> >
> > Yes. The only gateway that remains is that of the external, or south,
> > NIC.
> >
> > On 6/12/05, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
> > > http://www.ISAserver.org
> > >
> > > Not just removing one gateway - remove them all except the external
> > NIC.
> > > "There can be only one."
> > >
> > > -----Original Message-----
> > > From: MarvinC [mailto:marvinc@xxxxxxxxx]
> > > Sent: Sunday, June 12, 2005 5:34 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: No internet or ability to connect front-end
> owa
> > > to active directory...isa2k4
> > >
> > > http://www.ISAserver.org
> > >
> > > Removing the DMZ gateway was the first thing I tried to troublshoot,
> > > but it didn't help as I experienced the same problem with not being
> > > able to connect to the internet. I'm sure my problem is something
> > > simple but I can't figure it out.
> > >
> > >
> > >
> > > On 6/12/05, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
> > > > http://www.ISAserver.org
> > > >
> > > > Some reading on Basic TCP/IP routing is in order:
> > > > http://support.microsoft.com/?id=140859
> > > >
> > > > You need to ditch the default gateway on all but the external NIC.
> > > >
> > > > -----Original Message-----
> > > > From: MarvinC [mailto:marvinc@xxxxxxxxx]
> > > > Sent: Sunday, June 12, 2005 3:22 PM
> > > > To: [ISAserver.org Discussion List]
> > > > Subject: [isalist] No internet or ability to connect front-end owa
> > to
> > > > active directory...isa2k4
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > I've got a serious problem I could use some help with. My setup
> > > > consists of the following:
> > > >
> > > > 1 W2K3 Domain Controller
> > > > 1 W2k3 server w/ISA2K4 w/3 network cards:
> > > > North: Static IP from DSL
> > > > Subnet: 255.255.255.248
> > > > Gateway:
> > > >
> > > > South: 10.x.x.x
> > > > Subnet: 255.255.x.x
> > > > Gateway: IP of ISA server
> > > >
> > > > DMZ: 172.16.1.x
> > > > Subnet: 255.255.x.x
> > > > Gateway: 172.16.1.254
> > > >
> > > > 2 W2k3 Exchange Servers
> > > > designated FE: 172.16.1.x
> > > > designated be: 10.0.0.x
> > > >
> > > > I'm trying to follow the FEBE exchange server perimeter network
> > > > configuration document located in the ISA2K4 Kit and have gotten
> to
> > > > where I should be installing exchange 2K3 on the front-end server.
> > The
> > > > first problem is that I no longer have Internet access on any of
> my
> > > > systems. The second problem is that when attempting to install
> > > > exchange on the front-end server I get an error that it's unable
> to
> > > > connect with active directory.
> > > > I've been able to rule out a problem with my DSL because I can
> > connect
> > > > to the internet from my laptop without incident. I've also gone
> and
> > > > confirmed that I followed the directions in the document as
> listed.
> > At
> > > > this point I've started to see double and wonder if there's anyone
> > > > available that can assist with this issue? ANY responses are
> > > > appreciated.
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Other Internet Software Marketing Sites:
> > > > World of Windows Networking: http://www.windowsnetworking.com
> > > > Leading Network Software Directory: http://www.serverfiles.com
> > > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > > Network Security Library: http://www.secinf.net/
> > > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org Discussion List
> > as:
> > > > jim@xxxxxxxxxxxx
> > > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > > > All mail to and from this domain is GFI-scanned.
> > > >
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Other Internet Software Marketing Sites:
> > > > World of Windows Networking: http://www.windowsnetworking.com
> > > > Leading Network Software Directory: http://www.serverfiles.com
> > > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > > Network Security Library: http://www.secinf.net/
> > > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org Discussion List
> > as:
> > > marvinc@xxxxxxxxx
> > > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Other Internet Software Marketing Sites:
> > > World of Windows Networking: http://www.windowsnetworking.com
> > > Leading Network Software Directory: http://www.serverfiles.com
> > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > Network Security Library: http://www.secinf.net/
> > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List
> as:
> > > jim@xxxxxxxxxxxx
> > > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > All mail to and from this domain is GFI-scanned.
> > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Other Internet Software Marketing Sites:
> > > World of Windows Networking: http://www.windowsnetworking.com
> > > Leading Network Software Directory: http://www.serverfiles.com
> > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > Network Security Library: http://www.secinf.net/
> > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List
> as:
> > marvinc@xxxxxxxxx
> > > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > jim@xxxxxxxxxxxx
> > To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > All mail to and from this domain is GFI-scanned.
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> marvinc@xxxxxxxxx
> > To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> All mail to and from this domain is GFI-scanned.
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> marvinc@xxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
Other related posts:
