RE: External website with same domain as AD

  • From: "John Tolmachoff" <isalist@xxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 18 Feb 2003 07:25:56 -0800

If the server is on the Internet, there is no publishing or anything
involved, as it is a http request the same as if you went to www.msn.com
<http://www.msn.com/> .

 

If you ping the host name from internal, what happens? Does it resolve to
the correct IP address?

 

What server is giving you the 403 error?

 

John Tolmachoff  MCSE, CSSA

IT Manager, Network Engineer

211 E. Imperial Hwy, Suite 106

Fullerton, CA  92835

562-694-4800, ext. 104

jtolmachoff@xxxxxxxxxxxxxxxx

www.reliancesoft.com <http://www.reliancesoft.com/> 

 

 

-----Original Message-----
From: Riaz Kanani [mailto:riaz.kanani@xxxxxxxxxxxxxx] 
Sent: Tuesday, February 18, 2003 7:09 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: External website with same domain as AD

 

http://www.ISAserver.org

Hi John,

 

Have already tried this.. to no avail. Still get a 403 forbidden error.
Creating a web publishing point does not work either (though why I would
need to do this is lost on me). 

 

I can ping the remote server and do a dns lookup on it - but no luck via the
browser.

 

Any ideas?

 

Thanks,

 

Riaz

 

 

-----Original Message-----
From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx] 
Sent: 18 February 2003 14:58
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: External website with same domain as AD

 

http://www.ISAserver.org

Do not take this the wrong way, but this is a classic example of not well
thought out AD design.

 

What you have is Split DNS.

 

The short answer is you will have to create a Host entry (A record) in your
internal AD DNS zone for each public host. This means you need to make a
host entry in your internal DNS server for www.firstmedia.net
<http://www.firstmedia.net/>  pointing to 212.78.71.89.

 

John Tolmachoff MCSE, CSSA

IT Manager, Network Engineer

RelianceSoft, Inc.

Fullerton, CA  92835

www.reliancesoft.com

 

-----Original Message-----
From: Riaz Kanani [mailto:riaz.kanani@xxxxxxxxxxxxxx] 
Sent: Tuesday, February 18, 2003 4:16 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] External website with same domain as AD

 

http://www.ISAserver.org

Hi guys,

 

New to ISA server here.. I have a website held in a server farm under
www.firstmedia.net <http://www.firstmedia.net/>  and an office network under
Active Directory with the domain firstmedia.net. With nothing set (ie. ISA
server only - DNS set to map to the remote IP) typing www.firstmedia.net
<http://www.firstmedia.net/>  into the browser gives a 403 error. If I type
in the IP address I can access it fine. 

 

How can I allow us to access www.firstmedia.net <http://www.firstmedia.net/>
?

 

Thanks,

 

Riaz

 

________________________________________________

 

Riaz Kanani

Director of Technology

 

tel: 020 7566 7985

fax: 020 7566 7988

mobile: 07971 987 126

web:  <http://www.firstmedia.net/> www.firstmedia.net

 

________________________________________________

 


The information contained in this email is confidential. It may also be
legally privileged. It is intended only for the stated addressees and access
to it by any other person is unauthorized. If you are not an addressee, you
must not disclose, copy, circulate or in any other way use or rely on the
information contained in this email. Such unauthorized use may be unlawful.
If you have received this email in error, please inform us immediately at
security@xxxxxxxxxxxxxx and delete it and all copies from your system. Any
opinion or advice contained in this email is to be read subject to First
Media's terms and conditions of engagement.


 

Copyright C 1999~2003 First Media International. All Rights Reserved. Terms
and Conditions. At First Media, we value your privacy.

 

 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
riaz.kanani@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: