Re: HTTP-DNS Problem with WAN Site
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 8 Dec 2003 07:37:02 -0800
No, ya didn't, but I'll answer anyway. ;-)
..that's not "behind" ISA; that' "in front of"...
What's in the ISA WEBEXT..log?
Does ISA know to use your DNS server for that domain?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "William Robertson" <robertson.william@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Sunday, December 07, 2003 23:34
Subject: [isalist] HTTP-DNS Problem with WAN Site
http://www.ISAserver.org
(Ha, fixed it this time…)
Hi there
I have what I think is an interesting scenario. My whole ISA setup currently
works like a charm for all of the fancy schmancy requests I’ve had from
my
users. But this latest one baffles me intensely. I have a PIX firewall
behind my ISA (LAN → ISA →PIX → Internet), off which I
host a DMZ segment
to my parent company over a WAN link.
My DNS Server is also hosting a secondary DNS to their primary Windows 2000
DNS Servers so that I am able to name lookup their servers etc. I have thus
also added their domain name to my "Append these DNS suffixes..." option
under TCP/IP DNS properties on my workstation, and any nslookup for a server
in their domain works 100%.
The problem is though, when I try and connect to ANY of their websites (and
there are quite a few) via IE, I can only connect by using the IP Address of
the site, and *NOT* the FQDN. As noted, all DNS lookups work fine, (except
Reverse Lookups - is that a problem?), and I cannot think of anything else
more to try. I have enabled debugging on my PIX to see if there is any
traffic, and when using the FQDN the traffic does not even get to my PIX, so
that tells me the problem is between my IE and the ISA.
Is there perhaps someone who has a similar scenario that may be able to
suggest something?
Cheers
William R.
---------------------------------------------------------------------
Everything in this e-mail and attachments relating to the official
business of Columbus Stainless is proprietary to the company. It is
confidential, legally privileged and protected by law. Columbus
Stainless does not own and endorse any other content. Views and
opinions are those of the sender unless clearly stated as being that
of Columbus Stainless. The person addressed in the e-mail is the sole
authorised recipient. Please notify the sender immediately if it has
unintentionally reached you and do not read, disclose or use the
content in any way. Whilst all reasonable steps are taken to ensure
the accuracy and integrity of information and data transmitted
electronically and to preserve the confidentiality thereof, no
liability or responsibility whatsoever is accepted if information or
data is,for whatever reason, corrupted or does not reach its intended
destination.
---------------------------------------------------------------------
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
