Re: Publishing a web server in ISA2k4

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 27 Oct 2004 22:57:48 -0500

Hi Marvin,

Run and do NOT walk, to the Add/Remove programs applet on the ISA
firewall and delete all vestiges of the IIS WWW service from the
firewall. If I want to run a Web server on a firewall, I'll put it on a
sonicwall. :-)

HTH, 


Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Marvin Cummings [mailto:MarvinC@xxxxxxxxx] 
Sent: Wednesday, October 27, 2004 10:52 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Publishing a web server in ISA2k4

http://www.ISAserver.org

Something is definitely wrong because if I try to access either of
these sites on the ISa server I get an Under Construction page. I get
a page cannot be displayed error when trying to access the sites on
any other networked system.
Man this is frustrating!!!


On Wed, 27 Oct 2004 23:40:49 -0400, Marvin Cummings <marvinc@xxxxxxxxx>
wrote:
> http://www.ISAserver.org
> 
> 
> 
> This has already been done and is working fine. I was trying to track
> down the error that continues to pop-up in the alerts section. This
> error states that there's a service possibly using the same port or an
> adapter that isn't working. I do have IIS installed on this server so
> I'm wondering if that could be the culprit?
> 
> On Wed, 27 Oct 2004 23:17:50 -0400, Ara.A <ara@xxxxxxxxxx> wrote:
> > http://www.ISAserver.org
> >
> > Go to general, specify dial up preferences and allow automatic dial
to this
> > network and pick your dsl connection
> >
> >
> >
> > > -----Original Message-----
> > > From: Marvin Cummings [mailto:MarvinC@xxxxxxxxx]
> > > Sent: October 27, 2004 11:11 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] Re: Publishing a web server in ISA2k4
> > >
> > > http://www.ISAserver.org
> > >
> > > Being that the DSL service is dynamic I notice that ISA doesn't
seem
> > > to handle the IP change very well. If I go into the External
Network
> > > Listener IP Selection window I see the new IP sitting in the
> > > "Available IP Addresses" and the old IP in the "Selected IP
Address".
> > >
> > > On Wed, 27 Oct 2004 22:56:06 -0400, Marvin Cummings
<marvinc@xxxxxxxxx>
> > > wrote:
> > > > http://www.ISAserver.org
> > > >
> > > >
> > > >
> > > > No, the TZO client software is installed on the web server, a
separate
> > > > server. I did have access granted based on the external
connection so
> > > > leem switch to local host and see what happens.
> > > >
> > > > thnks
> > > >
> > > > On Wed, 27 Oct 2004 22:42:43 -0400, Ara.A <ara@xxxxxxxxxx>
wrote:
> > > > > http://www.ISAserver.org
> > > > >
> > > > > Here is the trick. You have to allow access based on localhost
to
> > > ns.tzo.com
> > > > > not from external nic. You are running tzo client on isa
itself,
> > > right? You
> > > > > need to make a rule, from local host, using those protocols to
> > > destinations
> > > > > (ns*.tzo.com)
> > > > >
> > > > >
> > > > >
> > > > > > -----Original Message-----
> > > > > > From: Marvin Cummings [mailto:MarvinC@xxxxxxxxx]
> > > > > > Sent: October 27, 2004 10:34 PM
> > > > > > To: [ISAserver.org Discussion List]
> > > > > > Subject: [isalist] Re: Publishing a web server in ISA2k4
> > > > > >
> > > > > > http://www.ISAserver.org
> > > > > >
> > > > > > My TZO Access rule looks like this:
> > > > > > Gen: Enable
> > > > > > Action: Allow
> > > > > > Protocols: Selected Protocols
> > > > > >    TZO - Inbound w/ports 21330 - 21333 defined
> > > > > >    TZO - Outbound w/ports 21330 - 21333 defined
> > > > > > From:
> > > > > >    ns.tzo.com
> > > > > >    ns2.zo.com
> > > > > >    etc...
> > > > > > To: External
> > > > > > User: All
> > > > > > Schedule: always
> > > > > > blah... blah... blah...
> > > > > >
> > > > > > At this point am I still publishing a web server or creating
a new
> > > server
> > > > > > rule?
> > > > > >
> > > > > > thnks
> > > > > >
> > > > > >
> > > > > > On Wed, 27 Oct 2004 21:46:28 -0400, Ara.A <ara@xxxxxxxxxx>
wrote:
> > > > > > > http://www.ISAserver.org
> > > > > > >
> > > > > > > Hello
> > > > > > > Do it this way
> > > > > > > 1.      Click on firewall policy tab, tool box, the new
protocol
> > > > > > > 2.      Give it a name based on what direction it is going
> > > > > > > 3.      Then click on new and specify the port and
protocol type.
> > > Keep
> > > > > > doing
> > > > > > > this till you make all definitions
> > > > > > > 4.      Go to network objects, click new and make a new
address
> > > range
> > > > > > and
> > > > > > > punch in the address for tzo servers
> > > > > > > 5.      Right click on firewall policy and create a new
access
> > > rule
> > > > > > which
> > > > > > > allows from local host (isa) using your all tzo defined
protocols
> > > to
> > > > > > defined
> > > > > > > ip address for tzo servers
> > > > > > >
> > > > > > > Hope this helps>
> > > > > > >
> > > > > > >
> > > > > > > > -----Original Message-----
> > > > > > > > From: Marvin Cummings [mailto:MarvinC@xxxxxxxxx]
> > > > > > > > Sent: Wednesday, October 27, 2004 10:34 PM
> > > > > > > > To: ISA Mailing List
> > > > > > > > Subject: [isalist] Re: Publishing a web server in ISA2k4
> > > > > > > >
> > > > > > > > http://www.ISAserver.org
> > > > > > > >
> > > > > > > > Hmph! Still no response. double-post:
> > > > > > > > I created two User Defined Protocols with the following
> > > settings:
> > > > > > > > Gen: TZO - Inbound
> > > > > > > > Parameters: Port Range 21330 - 21333
> > > > > > > >
> > > > > > > > Gen: TZO - Outbound
> > > > > > > > Parameters: Port Range 21330 - 21333
> > > > > > > >
> > > > > > > > Anyone know if this is correct? It doesn't appear to be
because
> > > I'm
> > > > > > > > still unable to access my sites.
> > > > > > > >
> > > > > > > >
> > > > > > > > On Wed, 27 Oct 2004 13:27:57 -0400, Marvin Cummings
> > > > > > <marvinc@xxxxxxxxx>
> > > > > > > > wrote:
> > > > > > > > > http://www.ISAserver.org
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > Question #2:
> > > > > > > > > Do I have to now install the TZO software on the ISA
server?
> > > In the
> > > > > > > > > past I've only installed it on my web server.
> > > > > > > > >
> > > > > > > > > thnks
> > > > > > > > >
> > > > > > > > > On Wed, 27 Oct 2004 12:56:51 -0400, Marvin Cummings
> > > > > > > > <marvinc@xxxxxxxxx> wrote:
> > > > > > > > > > http://www.ISAserver.org
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > What's the equivalent to publishing the TZO packet
filters
> > > in
> > > > > > > > ISA2K4?
> > > > > > > > > > I'm guessing it's going to be either a User Defined
or
> > > Common
> > > > > > > > > > Protocol. Can anyone confirm?
> > > > > > > > > >
> > > > > > > > > > thnks
> > > > > > > > > >
> > > > > > > > > >
------------------------------------------------------
> > > > > > > > > > List Archives:
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > > > > > ISA Server Newsletter:
> > > > > > http://www.isaserver.org/pages/newsletter.asp
> > > > > > > > > > ISA Server FAQ:
> > > > > > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > > > > > > >
------------------------------------------------------
> > > > > > > > > > Other Internet Software Marketing Sites:
> > > > > > > > > > World of Windows Networking:
> > > http://www.windowsnetworking.com
> > > > > > > > > > Leading Network Software Directory:
> > > http://www.serverfiles.com
> > > > > > > > > > No.1 Exchange Server Resource Site:
> > > http://www.msexchange.org
> > > > > > > > > > Windows Security Resource Site:
> > > http://www.windowsecurity.com/
> > > > > > > > > > Network Security Library: http://www.secinf.net/
Windows
> > > 2000/NT
> > > > > > Fax
> > > > > > > >
> > > > > > > > > > Solutions: http://www.ntfaxfaq.com
> > > > > > > > > >
------------------------------------------------------
> > > > > > > > > > You are currently subscribed to this ISAserver.org
> > > Discussion List
> > > > > > > > > > as: marvinc@xxxxxxxxx To unsubscribe visit
> > > > > > > > > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > > > > > > >
> > > > > > > > >
> > > > > > > > > ------------------------------------------------------
> > > > > > > > > List Archives:
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > > > > ISA Server Newsletter:
> > > http://www.isaserver.org/pages/newsletter.asp
> > > > > > > > > ISA Server FAQ:
> > > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > > > > > > ------------------------------------------------------
> > > > > > > > > Other Internet Software Marketing Sites:
> > > > > > > > > World of Windows Networking:
http://www.windowsnetworking.com
> > > > > > Leading
> > > > > > > > > Network Software Directory: http://www.serverfiles.com
> > > > > > > > > No.1 Exchange Server Resource Site:
http://www.msexchange.org
> > > > > > Windows
> > > > > > > > > Security Resource Site: http://www.windowsecurity.com/
Network
> > > > > > > > > Security Library: http://www.secinf.net/ Windows
2000/NT Fax
> > > > > > > > > Solutions: http://www.ntfaxfaq.com
> > > > > > > > > ------------------------------------------------------
> > > > > > > > > You are currently subscribed to this ISAserver.org
Discussion
> > > List
> > > > > > as:
> > > > > > > >
> > > > > > > > > marvinc@xxxxxxxxx To unsubscribe visit
> > > > > > > > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > > > > > >
> > > > > > > >
> > > > > > > > ------------------------------------------------------
> > > > > > > > List Archives:
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > > > ISA Server Newsletter:
> > > http://www.isaserver.org/pages/newsletter.asp
> > > > > > > > ISA Server FAQ:
> > > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > > > > > ------------------------------------------------------
> > > > > > > > Other Internet Software Marketing Sites:
> > > > > > > > World of Windows Networking:
http://www.windowsnetworking.com
> > > Leading
> > > > > > > > Network Software Directory: http://www.serverfiles.com
> > > > > > > > No.1 Exchange Server Resource Site:
http://www.msexchange.org
> > > Windows
> > > > > > > > Security Resource Site: http://www.windowsecurity.com/
Network
> > > > > > Security
> > > > > > > > Library: http://www.secinf.net/ Windows 2000/NT Fax
Solutions:
> > > > > > > > http://www.ntfaxfaq.com
> > > > > > > > ------------------------------------------------------
> > > > > > > > You are currently subscribed to this ISAserver.org
Discussion
> > > List as:
> > > > > > > > steve@xxxxxxxxxx To unsubscribe visit
> > > > > > > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > > > > >
> > > > > > > > ------------------------------------------------------
> > > > > > > > List Archives:
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > > > ISA Server Newsletter:
> > > http://www.isaserver.org/pages/newsletter.asp
> > > > > > > > ISA Server FAQ:
> > > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > > > > > ------------------------------------------------------
> > > > > > > > Other Internet Software Marketing Sites:
> > > > > > > > World of Windows Networking:
http://www.windowsnetworking.com
> > > > > > > > Leading Network Software Directory:
http://www.serverfiles.com
> > > > > > > > No.1 Exchange Server Resource Site:
http://www.msexchange.org
> > > > > > > > Windows Security Resource Site:
http://www.windowsecurity.com/
> > > > > > > > Network Security Library: http://www.secinf.net/
> > > > > > > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > > > > > > ------------------------------------------------------
> > > > > > > > You are currently subscribed to this ISAserver.org
Discussion
> > > List as:
> > > > > > > > ara@xxxxxxxxxx
> > > > > > >
> > > > > > >
> > > > > > > > To unsubscribe visit
> > > > > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > > > >
> > > > > > > ------------------------------------------------------
> > > > > > > List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > > ISA Server Newsletter:
> > > http://www.isaserver.org/pages/newsletter.asp
> > > > > > > ISA Server FAQ:
> > > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > > > > ------------------------------------------------------
> > > > > > > Other Internet Software Marketing Sites:
> > > > > > > World of Windows Networking:
http://www.windowsnetworking.com
> > > > > > > Leading Network Software Directory:
http://www.serverfiles.com
> > > > > > > No.1 Exchange Server Resource Site:
http://www.msexchange.org
> > > > > > > Windows Security Resource Site:
http://www.windowsecurity.com/
> > > > > > > Network Security Library: http://www.secinf.net/
> > > > > > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > > > > > ------------------------------------------------------
> > > > > > > You are currently subscribed to this ISAserver.org
Discussion List
> > > as:
> > > > > > marvinc@xxxxxxxxx
> > > > > > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > > > >
> > > > > >
> > > > > > ------------------------------------------------------
> > > > > > List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> > > > > > ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > > > ------------------------------------------------------
> > > > > > Other Internet Software Marketing Sites:
> > > > > > World of Windows Networking:
http://www.windowsnetworking.com
> > > > > > Leading Network Software Directory:
http://www.serverfiles.com
> > > > > > No.1 Exchange Server Resource Site:
http://www.msexchange.org
> > > > > > Windows Security Resource Site:
http://www.windowsecurity.com/
> > > > > > Network Security Library: http://www.secinf.net/
> > > > > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > > > > ------------------------------------------------------
> > > > > > You are currently subscribed to this ISAserver.org
Discussion List
> > > as:
> > > > > > ara@xxxxxxxxxx
> > > > > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > >
> > > > > ------------------------------------------------------
> > > > > List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> > > > > ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > > ------------------------------------------------------
> > > > > Other Internet Software Marketing Sites:
> > > > > World of Windows Networking: http://www.windowsnetworking.com
> > > > > Leading Network Software Directory: http://www.serverfiles.com
> > > > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > > > Network Security Library: http://www.secinf.net/
> > > > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > > > ------------------------------------------------------
> > > > > You are currently subscribed to this ISAserver.org Discussion
List as:
> > > marvinc@xxxxxxxxx
> > > > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > >
> > > >
> > > > ------------------------------------------------------
> > > > List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Other Internet Software Marketing Sites:
> > > > World of Windows Networking: http://www.windowsnetworking.com
> > > > Leading Network Software Directory: http://www.serverfiles.com
> > > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > > Network Security Library: http://www.secinf.net/
> > > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org Discussion
List as:
> > > marvinc@xxxxxxxxx
> > > > To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Other Internet Software Marketing Sites:
> > > World of Windows Networking: http://www.windowsnetworking.com
> > > Leading Network Software Directory: http://www.serverfiles.com
> > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > Network Security Library: http://www.secinf.net/
> > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List
as:
> > > ara@xxxxxxxxxx
> > > To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List
as: marvinc@xxxxxxxxx
> > To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
marvinc@xxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx




Other related posts: