Web publishing rules are not external IP specific. If you want your web publishing to be limited to a set of or single IP, you set that in the Incoming web requests tab of the array properties. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: "Steven Sporen" <sporens@xxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, January 17, 2002 07:17 Subject: [isalist] Binding problem... ISA - What are you thinking? http://www.ISAserver.org Hi, We've picked up on a problem with ISA server, we have three servers protected by ISA two run a secure website (SSL) while the last is a custom SSL application. We use "Web publishing rules" with a certificate to publish the secure website, ie. the cert is loaded onto ISA and requests are forwarded through ISA into the web environment. The last server we use "Server Publishing rules" to publish port 443 through to the custom SSL app. The problem we seem to have is that I can't find where to specify which IP addresses the "Web publishing rules" apply to. On our external interface we have multiple public IP's, one is used for the secure site, while the other is used for the custom app. We implemented the custom ssl app yesterday, tested it and things worked fine. Today however (about 24 hours later) the secure website stopped responding and reported "ERROR: 1790 - Logon Failure, ISA Server", hunting through ISA's logs and IIS's log we couldn't find anything. We then proceeded to start rolling back configuration changes. We found that as soon as we disabled the custom SSL application the website started working again. Hmmm... ISA what are you thinking? We re-enabled the custom tunnel (As we need it working) and everything is back up. Is there somewhere I can specify the IP of the external interface the the web publishing rules bind to? Has anyone else had this problem? And last but not least - do you think upgrading to SP1 will fix this... watching the list, we've decided to hold off for a week. Regards Steven Too many wizards not enough functionality _________________________________________________________________ Send and receive Hotmail on your mobile device: http://mobile.msn.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')