Re: Web publishing Fails
- From: "Steve Moffat" <steve@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- To: "Isa Weblist" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 8 Jan 2004 00:24:36 -0000
Are you allowing http incoming?
Steve
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, January 07, 2004 8:19 PM
To: Isa Weblist
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
ISA should resolve that FQDN to the internal IP unless you want chain
loops, 14120 errors and random weirdness.
You state that you have socket pooling disabled on the ISA; what IIS
components did you install?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 07, 2004 14:28
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
Hi, when I ping www.myfaircd.com from the ISA server I get good replies
to
24.207.24.121 this is correct dns resolving as far as I can see. I see
the
"GET" is using the FQDN for redirect, this is the best approach for web
publishing ... I thought... on this ISA I have socketpooling disabled
for
running GFI mailsecurity would this have anything to do with failed web
publishing?
Thanks
Peter
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, January 07, 2004 1:37 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
Here's the log data I needed:
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:49:08
K2 - www.myfaircd.com 24.27.24.121 80 20960 453
- http GET http://www.myfaircd.com/ Inet 10060
Notice that the "GET" references the public FQDN; this indicates that
the
web publsihing rule is actually trying to use the FQDN to
redirect.
If you "ping www.myfaircd.com" from the ISA itself, what do you see?
Also, it's clear from this log entry that you're testing publishing
rules
from behind ISA; this is very error prone and not
supported.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 07, 2004 10:14
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
Hi Jim, the redirect value in the web publishing rule is 192.168.200.3
port
80 The ip that is listening is 24.207.24.121 and the FQDN is
www.myfaircd.com it publishes the web site at 192.168.200.3
Here is a more complete view of the web log: A copy to excel will
columnize
the data correctly, thanks again. Peter
#Fields: c-ip cs-username c-agent date time s-computername
cs-referred r-host r-ip r-port time-taken cs-bytes
sc-bytes cs-protocol s-operation cs-uri s-object-source
sc-status
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:37
K2 - www.microsoft.com 207.46.249.252 80 100 409
456 http GET
http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Inet
302
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:37
K2 - home.microsoft.com 207.68.172.246 80 90 371
288 http GET http://home.microsoft.com/ Inet 302
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:37
K2 - www.msn.com 207.68.173.254 80 220 427
28891 http GET http://www.msn.com/ Inet 200
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:39
K2 - c.msn.com 207.68.177.126 80 70 530 442
http GET
http://c.msn.com/c.gif?na=1154&nc=10009&ps=10274&di=340&pi=7317&TP=http%
3a%2
f%2fwww.msn.com%2f Inet 200
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:49:08
K2 - www.myfaircd.com 24.27.24.121 80 20960 453
- http GET http://www.myfaircd.com/ Inet 10060
24.207.24.8 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:53:32
K2 - www.sundevtech.com 192.168.200.30 80 3675 381
4255 http GET http://192.168.200.30/ Inet 200
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:53:32
K2 - www.sundevtech.com 24.207.24.8 80 3726 457
4244 http GET http://www.sundevtech.com/ Inet 200
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, January 07, 2004 9:42 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
Is that all you're logging?
There's nothing of value in that log entry.
What is your redirect value in the web publishing rule?
What is the rest of the log entry?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 07, 2004 09:09
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
Hi Jim thanks for taking a look at my web publishing problem.
I have looked into my webext logs and found that the 10060 error is
related
to: (as per log data)
r-port time-taken cs-bytes sc-bytes cs-protocol
sc-status
80 20990 310 - http
10060
Could this be better configured if I changed the incoming listening port
on
the second external ip to something other than 80?
Thanks,
Peter
****************************************************
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, January 07, 2004 6:45 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
That error is a Windsock response saying "that host didn't respond on
that
protocol/port combination.
Take a look in the ISA WEBEXT log to see what actually happened.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, January 06, 2004 20:44
Subject: [isalist] Web publishing Fails
http://www.ISAserver.org
Hello, I am stumped. I have my ISA running on a Windows 2003 server, 2
nics,
one internal ip and one external. On the external I have leased 2 static
ips, both FQDNs. I have in my private LAN one (Win2003)DC with Exchange
2003, call this server1. I have a second web server with IIS 6 server
2000
call this server2. I have created destination sets and web publishing
rules
to have everything working on server1 based on one of the static ips and
a
FQDN. For the second static ip I have set up an individual listener for
that
ip both listen for incoming on port 80. I have created a destination set
with a FQDN that uses the path /* and in the web publishing rule it is
redirected to 192.168.200.3 port 80. All fairly basic but I get a msg
saying
the page cannot be displayed plus:
10060 - Connection timeout
Internet Security and Acceleration Server
Any help would be appreciated,
Thanks,
Peter
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter.forster@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter.forster@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter.forster@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
steve@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
This E-Mail is confidential. It is not intended to be read, copied, disclosed
or used by any person other than the recipient named above.
Unauthorised use, disclosure, or copying is strictly prohibited and may be
unlawful. Optimum IT Solutions disclaims any liability for any action taken in
connection of this E-Mail. The comments or statements expressed in this E-Mail
are not necessarily those of Optimum IT Solutions or its subsidiaries or
affiliates.
administrator@xxxxxxxxxxxxxxxxxxxxxxxxxx
Other related posts:
