RE: Destination set being ignored
- From: "G. Waleed Kavalec" <Kavalec@xxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 8 Dec 2003 13:54:02 -0600
I took the /hub0002 off of the redirect, this changes the error to a 403
(12202).
Checking "Send the original host header..." still gives a 403/12202.
The link is http://webedi.bswa.com/hub0002 which WORKS FROM THE ISA
MACHINE, this is what I find confusing.
Try http://64.147.85.77/hub0002 to see what is supposed to show up.
Then nslookup webedi.bswa.com to see that A=B.
How can I find out what request/headers ISA is really passing on to the
web server?
----------------------------
G. Waleed Kavalec
Baca, Stein, White and Associates
281-342-2646
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Monday, December 08, 2003 9:24 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Destination set being ignored
http://www.ISAserver.org
#3 is incorrect; ISA will not add path data to the original request.
Aside from that, the error you're getting is "WSAHOST_NOT_FOUND", a
Winsock name resolution error. This indicates that the host listed in
the "Redirect To" did not resolve to an IP.
Is there a public link we can hit?
I suspect that the pages hold something that isn't reachable from the
client...
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "G. Waleed Kavalec" <Kavalec@xxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, December 08, 2003 05:47
Subject: [isalist] RE: Destination set being ignored
http://www.ISAserver.org
Hi Jim
1. I have a perimeter machine (outside the firewall) which uses the
ISP's DNS.
2. at the ISA machine nslookup gets me the internal address of the web
server.
3. My web publishing rule redirects to www.domain.com/path
Send original host header is NOT checked
Ports are all left at default (80, 443, 21)
4. Yes, "hub002" was a typo.
----------------------------
G. Waleed Kavalec
Baca, Stein, White and Associates
281-342-2646
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Sunday, December 07, 2003 4:57 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Destination set being ignored
http://www.ISAserver.org
Q1 - where are you testing this from?
Q2 - at the ISA server, what IP does "nslookup my-url" get you? Q3 -
exactly how is the "redirect to" defined in the web publishing rule? Q4
- this is a typo, correct? <snip> I am trying to map
http://my-url/hub002 to a local server http://192.168.2.228/hub0002
<snip> ..because if it's not, it won't work; ISA does not edit the path
data in web publishing rules.
1. don't use IPs in the destination sets fro web publishing. It's bad.
2. only test publishing rules from outside ISA; at best, you'll get
inconsistent results testing them from behind ISA.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "G. Waleed Kavalec" <Kavalec@xxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Sunday, December 07, 2003 13:01
Subject: [isalist] RE: Destination set being ignored
http://www.ISAserver.org
One more time (am I getting tired)
> I have a destination set defined for my-url/hub0002
> but http://my-external-ip/hub0002 gives me an ISA 11001
Should have read:
"I have a destination set defined for my-url/hub0002
but http://my-url/hub0002 gives me an ISA 11001"
----------------------------
G. Waleed Kavalec
Baca, Stein, White and Associates
281-342-2646
-----Original Message-----
From: G. Waleed Kavalec
Sent: Sunday, December 07, 2003 2:59 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Destination set being ignored
http://www.ISAserver.org
(repost sans pgp sig)
Every time I think I know how to use ISA it sends me back to
kindergarten.
I am trying to map http://my-url/hub002
to a local server http://192.168.2.228/hub0002
I have a destination set defined for my-external-ip/hub0002
and http://my-external-ip/hub0002 works fine.
I have a destination set defined for my-url/hub0002
but http://my-external-ip/hub0002 gives me an ISA 11001
This isn't an issue on the internal server because I have "my-url"
mapped on internal DNS, and on THAT machine
http://my-external-ip/hub0002 works fine.
It's only when coming from outside the firewall, using the url, that it
fails. Yet nslookup on my-url reports our ISP's DNS entry is correct.
How do I isolate this? Any suggestions?
(PS: yes, I have rebooted. Often.)
----------------------------
G. Waleed Kavalec
Baca, Stein, White and Associates
281-342-2646
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kavalec@xxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kavalec@xxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kavalec@xxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
