RE: Firewall Client and DNS name resolution

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 15 Oct 2004 17:59:50 -0700

..we try...

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!
________________________________________
From: tim S [mailto:tim724342@xxxxxxxxx] 
Sent: Friday, October 15, 2004 14:56
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Firewall Client and DNS name resolution

http://www.ISAserver.org 
Jim,
 
You are the man!!   I went through all the articles you've written so far on 
ISA.  You cleared up lot of things that I wished someone will explain in 
detail.  I wonder how I missed reading them from isaserver.org in the first 
place.  Thanks.


Jim Harrison <Jim@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org
Take a read here:
http://isaserver.org/tutorials/ISA_Clients__Part_1__General_ISA_Server_Configuration.html
..and here:
http://isaserver.org/tutorials/ISA_Clients__Part_2_SecureNAT_and_Web_Proxy_Client.html
 
..and here:
http://isaserver.org/tutorials/ISA_Clients__Part_3_The_Firewall_Client.html

99% of the time, that error is because IE couldn't perform the auto detection.

________________________________________
From: tim S [mailto:tim724342@xxxxxxxxx] 
Sent: Thursday, October 14, 2004 13:34
To: [ISAserver.org Discussion List]
Subject: [isalist] Firewall Client and DNS name resolution

http://www.ISAserver.org 
I remember reading Tom's ISA 2000 book about firewall clients actually send 
their DNS queries to DNS servers configured on the NIC rather than to ISA 
server itself.  He even said that he confirmed it by using network monitor.
 
My machine is configured with both firewall and webproxy clients.  Whenever I 
type a FQDN and if it can't be resolved, the html error page usually displays 
ISA's message saying ISA can't resolve the domain name.  I have two internal 
DNS servers running in my domain forwarding external requests to my ISP, and I 
want all clients configured with firewall client to use the DNS server.  How 
can I accomplish this?  I don't want to place the extra burden of resolving DNS 
queries on ISA, when I have full blown DNS servers running internally.  Thanks 
________________________________________
Do you Yahoo!?
Yahoo! Mail Address AutoComplete - You start. We finish. 
------------------------------------------------------ List Archives: 
http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: 
http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: 
http://www.isaserver.org/pages/larticle.asp?type=FAQ 
------------------------------------------------------ Other Internet Software 
Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com 
Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange 
Server Resource Site: http://www.msexchange.org Windows Security Resource Site: 
http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ 
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com 
------------------------------------------------------ You are currently 
subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To 
unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report 
abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
tim724342@xxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx 
All mail from this domain has been virus-scanned
________________________________________
Do you Yahoo!?
vote.yahoo.com - Register online to vote today! 
------------------------------------------------------ List Archives: 
http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: 
http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: 
http://www.isaserver.org/pages/larticle.asp?type=FAQ 
------------------------------------------------------ Other Internet Software 
Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com 
Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange 
Server Resource Site: http://www.msexchange.org Windows Security Resource Site: 
http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ 
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com 
------------------------------------------------------ You are currently 
subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To 
unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report 
abuse to listadmin@xxxxxxxxxxxxx

All mail from this domain has been virus-scanned.



Other related posts: