HTTP-DNS Problem with WAN Site

  • From: "William Robertson" <robertson.william@xxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 8 Dec 2003 09:34:42 +0200

(Ha, fixed it this time…)

Hi there



I have what I think is an interesting scenario. My whole ISA setup currently
works like a charm for all of the fancy schmancy requests I’ve had from 
my
users. But this latest one baffles me intensely. I have a PIX firewall
behind my ISA (LAN → ISA →PIX → Internet), off which I 
host a DMZ segment
to my parent company over a WAN link.



My DNS Server is also hosting a secondary DNS to their primary Windows 2000
DNS Servers so that I am able to name lookup their servers etc. I have thus
also added their domain name to my "Append these DNS suffixes..." option
under TCP/IP DNS properties on my workstation, and any nslookup for a server
in their domain works 100%.



The problem is though, when I try and connect to ANY of their websites (and
there are quite a few) via IE, I can only connect by using the IP Address of
the site, and *NOT* the FQDN. As noted, all DNS lookups work fine, (except
Reverse Lookups - is that a problem?), and I cannot think of anything else
more to try. I have enabled debugging on my PIX to see if there is any
traffic, and when using the FQDN the traffic does not even get to my PIX, so
that tells me the problem is between my IE and the ISA.



Is there perhaps someone who has a similar scenario that may be able to
suggest something?



Cheers

William R.




---------------------------------------------------------------------
Everything in this e-mail and attachments relating to the official 
business of Columbus Stainless is proprietary to the company. It is 
confidential, legally privileged and protected by law. Columbus 
Stainless does not own and endorse any other content. Views and 
opinions are those of the sender unless clearly stated as being that 
of Columbus Stainless. The person addressed in the e-mail is the sole 
authorised recipient.  Please notify the sender immediately if it has 
unintentionally reached you and do not read, disclose or use the 
content in any way. Whilst all reasonable steps are taken to ensure 
the accuracy and integrity of information and data transmitted 
electronically and to preserve the confidentiality thereof, no 
liability or responsibility whatsoever is accepted if information or 
data is,for whatever reason, corrupted or does not reach its intended
destination.
---------------------------------------------------------------------

Other related posts: