Re: Web publishing Fails

Given that he's on roadrunner, it's likely that they're blocking inbound HTTP.
His IP resolves to cs242724-121.austin.rr.com.

Say 'hi' to Austin for me willya?

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Thu, 8 Jan 2004 00:29:35 -0000
 "Steve Moffat" <steve@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
http://www.ISAserver.org

When I ping you it resolves correctly.......no go with telneting to port
80 tho'......either you have iis on Isa listening on 80 or you aren't
allowing 80 incoming.

Steve 

-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, January 07, 2004 8:25 PM
To: Isa Weblist
Subject: [isalist] Re: Web publishing Fails

http://www.ISAserver.org

Are you allowing http incoming?

Steve

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, January 07, 2004 8:19 PM
To: Isa Weblist
Subject: [isalist] Re: Web publishing Fails

http://www.ISAserver.org

ISA should resolve that FQDN to the internal IP unless you want chain
loops, 14120 errors and random weirdness.

You state that you have socket pooling disabled on the ISA; what IIS
components did you install?

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message -----
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 07, 2004 14:28
Subject: [isalist] Re: Web publishing Fails


http://www.ISAserver.org

Hi, when I ping www.myfaircd.com from the ISA server I get good replies
to
24.207.24.121 this is correct dns resolving as far as I can see. I see
the "GET" is using the FQDN for redirect, this is the best approach for
web publishing ... I thought... on this ISA I have socketpooling
disabled for running GFI mailsecurity would this have anything to do
with failed web publishing?
Thanks
Peter

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, January 07, 2004 1:37 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Web publishing Fails

http://www.ISAserver.org

Here's the log data I needed:
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:49:08
K2 - www.myfaircd.com 24.27.24.121 80 20960 453
- http GET http://www.myfaircd.com/ Inet 10060

Notice that the "GET" references the public FQDN; this indicates that
the web publsihing rule is actually trying to use the FQDN to redirect.
If you "ping www.myfaircd.com" from the ISA itself, what do you see?

Also, it's clear from this log entry that you're testing publishing
rules from behind ISA; this is very error prone and not supported.

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message -----
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 07, 2004 10:14
Subject: [isalist] Re: Web publishing Fails


http://www.ISAserver.org

Hi Jim, the redirect value in the web publishing rule is 192.168.200.3
port
80 The ip that is listening is 24.207.24.121 and the FQDN is
www.myfaircd.com it publishes the web site at 192.168.200.3
Here is a more complete view of the web log: A copy to excel will
columnize
the data correctly, thanks again. Peter


#Fields: c-ip cs-username c-agent date time s-computername
cs-referred r-host r-ip r-port time-taken cs-bytes
sc-bytes cs-protocol s-operation cs-uri s-object-source
sc-status
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:37
K2 - www.microsoft.com 207.46.249.252 80 100 409
456 http GET
http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Inet
302
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:37
K2 - home.microsoft.com 207.68.172.246 80 90 371
288 http GET http://home.microsoft.com/ Inet 302
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:37
K2 - www.msn.com 207.68.173.254 80 220 427
28891 http GET http://www.msn.com/ Inet 200
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:39
K2 - c.msn.com 207.68.177.126 80 70 530 442
http GET
http://c.msn.com/c.gif?na=1154&nc=10009&ps=10274&di=340&pi=7317&TP=http%
3a%2
f%2fwww.msn.com%2f Inet 200
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:49:08
K2 - www.myfaircd.com 24.27.24.121 80 20960 453
- http GET http://www.myfaircd.com/ Inet 10060
24.207.24.8 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:53:32
K2 - www.sundevtech.com 192.168.200.30 80 3675 381
4255 http GET http://192.168.200.30/ Inet 200
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:53:32
K2 - www.sundevtech.com 24.207.24.8 80 3726 457
4244 http GET http://www.sundevtech.com/ Inet 200

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, January 07, 2004 9:42 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Web publishing Fails

http://www.ISAserver.org

Is that all you're logging?
There's nothing of value in that log entry.

What is your redirect value in the web publishing rule?
What is the rest of the log entry?

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message ----- 
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 07, 2004 09:09
Subject: [isalist] Re: Web publishing Fails


http://www.ISAserver.org

Hi Jim thanks for taking a look at my web publishing problem.
I have looked into my webext logs and found that the 10060 error is
related
to: (as per log data)
r-port time-taken cs-bytes sc-bytes cs-protocol
sc-status
80 20990 310 - http
10060

Could this be better configured if I changed the incoming listening port
on
the second external ip to something other than 80?

Thanks,
Peter
****************************************************

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, January 07, 2004 6:45 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Web publishing Fails

http://www.ISAserver.org

That error is a Windsock response saying "that host didn't respond on
that
protocol/port combination.
Take a look in the ISA WEBEXT log to see what actually happened.

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message ----- 
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, January 06, 2004 20:44
Subject: [isalist] Web publishing Fails


http://www.ISAserver.org

Hello, I am stumped. I have my ISA running on a Windows 2003 server, 2
nics,
one internal ip and one external. On the external I have leased 2 static
ips, both FQDNs. I have in my private LAN one (Win2003)DC with Exchange
2003, call this server1. I have a second web server with IIS 6 server
2000
call this server2. I have created destination sets and web publishing
rules
to have everything working on server1 based on one of the static ips and
a
FQDN. For the second static ip I have set up an individual listener for
that
ip both listen for incoming on port 80. I have created a destination set
with a FQDN that uses the path /* and in the web publishing rule it is
redirected to 192.168.200.3 port 80. All fairly basic but I get a msg
saying
the page cannot be displayed plus:
10060 - Connection timeout
Internet Security and Acceleration Server
Any help would be appreciated,
Thanks,
Peter


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter.forster@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter.forster@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter.forster@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
steve@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



This E-Mail is confidential. It is not intended to be read, copied,
disclosed or used by any person other than the recipient named above. 


Unauthorised use, disclosure, or copying is strictly prohibited and may
be unlawful. Optimum IT Solutions disclaims any liability for any action
taken in connection of this E-Mail. The comments or statements expressed
in this E-Mail are not necessarily those of Optimum IT Solutions or its
subsidiaries or affiliates.

administrator@xxxxxxxxxxxxxxxxxxxxxxxxxx 



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
steve@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: