Re: HTTP 502 Proxy Error: 12211
- From: "Terry Fedirko" <Terry.Fedirko@xxxxxxxxxxx>
- To: isalist@xxxxxxxxxxxxx
- Date: Sun, 3 Feb 2002 18:04:21 -0700
I would like to thank everyone who has been trying to help me resolve this
problem. I took all of your advise and applied them with some success
but not entirely. So... I went back and read the section called
"Configureing ISA Server for Outbound Access" (Chapter 8) in the book
called "Configuring ISA Server 2000" (by Dr. Thomas W. Shinder and
Associates - Good Book!!!) and followed the instructions on page 461 to
463 ("Routing to a Linux Squid Server"). Even thought the upstream server
is a Unix box, I followed the instructions using the wizard supplied
(Note...this was no different than what I did before). But before I
configured this new Routine Rule, I deleted the previous one I created.
After finishing the wizard, I when back into the configuration and removed
the "Automatic Poll Upstream Server for Array Configuration" check box
since the Unix do not use the Array Config features (as I did before).
Also, I configured a backup Upsteam Proxy Server using same Port number
(911) but to a different IP address (question: does this make any
difference???). I did this several times of removing and deleting the
Routing rule (out of fustration) until it finally worked!!!! Why did it
worked, maybe we should ask Microsoft. I beleive there is a definite bug
in ISA when configuring a Upstream Server when using a differant SSL
Tunnel.
But again, I would like to thank you for all your help....Terry Fedirko
> Port 911 is assigned to the following
> http://www.iana.org/assignments/port-numbers :
> xact-backup 911 tcp 911 tcp xact-backup
> xact-backup 911 udp 911 udp xact-backup
>
> Try the following:
> SSL TUNNEL in:
> UDP
> Receive-send
> Local 911
> Remote any
> Local computer <your DNS IP>
> Remote Computer any
>
> SSL TUNNEL out:
> TCP
> Outbound
> Local any
> Remote 911
> Local computer <your DNS IP>
> Remote Computer any
>
>
> Joseph
>
> -----Original Message-----
> From: Terry Fedirko [mailto:Terry.Fedirko@xxxxxxxxxxx]
> Sent: Friday, February 01, 2002 6:25 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: HTTP 502 Proxy Error: 12211
>
> http://www.ISAserver.org
>
>
> I am running IE 6.0 on the same ISA server purely for testing. I
> configured IE to point to the ISA server on port 8080 (HTTP, Secure, FTP
> and Gopher). Under ISA, I have created a SSL Tunnel port 911 to talk
> to
> one of the upstream proxy server which is a UNIX base system. I do not
> understand why they use 911 but thats how they configured it. If I
> tried
> using IE on a different computer accessing the same ISA server, I still
> get the same result.
>
> One note of interest. I am testing another ISA Server on a different
> system using the same configuration (more or less) that points to the
> same
> upstream proxy server. Somehow (and I don't know why) I was able to
> access the Intranet but still unable to access the Internet. After a
> short time, I keep getting a 10060 (permission denied) or 10065 (Host
> Unreachable).
>
> Again, I need help. Any suggestions or ideas???? Terry
>
>
> > Is IE 6.0 on the ISA server? Are you looking at your own sites or an
> > external site?
> >
> > -----Original Message-----
> > From: Terry Fedirko [mailto:Terry.Fedirko@xxxxxxxxxxx]
> > Sent: Thursday, January 31, 2002 1:45 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Re: HTTP 502 Proxy Error: 12211
> >
> > http://www.ISAserver.org
> >
> >
> > I did configure the SSL Tunneling using port 911 recommended by
> Mcrosoft
> > Q283284. After running this script, I checked the registry and found
> > that
> > the new port has been added (so far so good). I rebooted the machine
> > (just to be on the safe side) and started up the Internet Explorer
> > (6.0).
> > When trying to access a URL, I'm still getting the same old HTTP 502
> > 12211 error message. I even try to re-install the ISA Enterprise
> > (including SP1 - Note: SP2 has been installed on Window 2000) and
> still
> > no go. I even remove the SSL 443 and 563 tunnel port from the
> registry
> > but again the same result. This is starting to become a real headache
> > and
> > ready to throw this product out!!! I cannot understand why Microsoft
> > develop a product that seems so simple to configure but difficult to
> > debug
> > (a typical Microsoft way). Any other suggestions, ideas???? Thank
> you.
> >
> >
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > cismic@xxxxxxx
> > To unsubscribe send a blank email to
> $subst('Email.Unsub')
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> cismic@xxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
