If the server is on the Internet, there is no publishing or anything involved, as it is a http request the same as if you went to www.msn.com <http://www.msn.com/> . If you ping the host name from internal, what happens? Does it resolve to the correct IP address? What server is giving you the 403 error? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer 211 E. Imperial Hwy, Suite 106 Fullerton, CA 92835 562-694-4800, ext. 104 jtolmachoff@xxxxxxxxxxxxxxxx www.reliancesoft.com <http://www.reliancesoft.com/> -----Original Message----- From: Riaz Kanani [mailto:riaz.kanani@xxxxxxxxxxxxxx] Sent: Tuesday, February 18, 2003 7:09 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: External website with same domain as AD http://www.ISAserver.org Hi John, Have already tried this.. to no avail. Still get a 403 forbidden error. Creating a web publishing point does not work either (though why I would need to do this is lost on me). I can ping the remote server and do a dns lookup on it - but no luck via the browser. Any ideas? Thanks, Riaz -----Original Message----- From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx] Sent: 18 February 2003 14:58 To: [ISAserver.org Discussion List] Subject: [isalist] RE: External website with same domain as AD http://www.ISAserver.org Do not take this the wrong way, but this is a classic example of not well thought out AD design. What you have is Split DNS. The short answer is you will have to create a Host entry (A record) in your internal AD DNS zone for each public host. This means you need to make a host entry in your internal DNS server for www.firstmedia.net <http://www.firstmedia.net/> pointing to 212.78.71.89. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -----Original Message----- From: Riaz Kanani [mailto:riaz.kanani@xxxxxxxxxxxxxx] Sent: Tuesday, February 18, 2003 4:16 AM To: [ISAserver.org Discussion List] Subject: [isalist] External website with same domain as AD http://www.ISAserver.org Hi guys, New to ISA server here.. I have a website held in a server farm under www.firstmedia.net <http://www.firstmedia.net/> and an office network under Active Directory with the domain firstmedia.net. With nothing set (ie. ISA server only - DNS set to map to the remote IP) typing www.firstmedia.net <http://www.firstmedia.net/> into the browser gives a 403 error. If I type in the IP address I can access it fine. How can I allow us to access www.firstmedia.net <http://www.firstmedia.net/> ? Thanks, Riaz ________________________________________________ Riaz Kanani Director of Technology tel: 020 7566 7985 fax: 020 7566 7988 mobile: 07971 987 126 web: <http://www.firstmedia.net/> www.firstmedia.net ________________________________________________ The information contained in this email is confidential. It may also be legally privileged. It is intended only for the stated addressees and access to it by any other person is unauthorized. If you are not an addressee, you must not disclose, copy, circulate or in any other way use or rely on the information contained in this email. Such unauthorized use may be unlawful. If you have received this email in error, please inform us immediately at security@xxxxxxxxxxxxxx and delete it and all copies from your system. Any opinion or advice contained in this email is to be read subject to First Media's terms and conditions of engagement. Copyright C 1999~2003 First Media International. All Rights Reserved. Terms and Conditions. At First Media, we value your privacy. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isalist@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: riaz.kanani@xxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isalist@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')