Re: Help - Web Server Publishing

  • From: "Carson Reid" <creid@xxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 9 May 2002 00:04:54 -0500

If you have a deny rule that denies the protocol that you are trying to
use, it will take affect no matter where it is. The rules that you see
on the screen are only listed alphabetically. =)

Carson Reid, MCSE,MCSA,A+
Network Administrator
Herzing College Winnipeg Campus
LEARN.EARN.WIN.
PHONE: 204.775.8175
FAX: 204.783.8107
Creid@xxxxxxxxxxxxxxx
 
 

-----Original Message-----
From: Chris Lawless [mailto:ChrisL@xxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, May 08, 2002 4:52 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Help - Web Server Publishing

http://www.ISAserver.org


Okay, I have the standard "Internet Access" protocol rule setup for
clients
to get out, I have now added another Protocol Rule for HTTP (Port 80)
Inbound.

I have a packet filter setup to allow HTTP Server traffic, I also tried
adding one for HTTP in both directions, heck I even tried one with
everything to everywhere enabled - no joy.

Under publishing I have the web server published, I'm assuming I don't
have
to delete the "Last" Deny rule, it does go through in sequence doesn't
it?

Other than the above where can I enable my protocol? I created an HTTP
Inbound protocol and tried that... same old...

Thanks for your help and patience.

Chris


-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx]
Sent: Wednesday, May 08, 2002 5:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Help - Web Server Publishing


http://www.ISAserver.org


No, I publish 20 sites using ip no's, it'll be your protocol not enabled

Steve

Steve Moffat
7 Boss's Cove Road
Pembroke
HM01
Bermuda
 
Tel: 441 292 8240
Fax: 441 292 0455
 
steve@xxxxxxxxxxxxxxx
http://www.optimum.mine.nu


-----Original Message-----
From: Chris Lawless [mailto:ChrisL@xxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, May 08, 2002 5:43 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Help - Web Server Publishing


http://www.ISAserver.org


I added a packet filter, although Tom's book says it is not required.
I'm now thinking it is because I am using IP addresses instead of a
FQDN, I'm registering a domain name to test with.

Chris.


-----Original Message-----
From: Carson Tu [mailto:ctu@xxxxxxxxxxxx]
Sent: Wednesday, May 08, 2002 3:52 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Help - Web Server Publishing


http://www.ISAserver.org


Have you configured a package filter to allow "HTTP server", which is
inboud 80 traffic? Try to allow all in package filter. publishing works,
try to tight it.

Carson

-----Original Message-----
From: Stefano Peduzzi [mailto:Stefano.Peduzzi@xxxxxxxxxxxxx]
Sent: Wednesday, May 08, 2002 2:37 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Help - Web Server Publishing


http://www.ISAserver.org


> I've created a protocol rule and the internal machine can browse ok. I

> cannot browse from the ISA despite adding a packet filter for HTTP / 
> 80
but
> that's not the end of thr world.

It's better if you make it a web proxy client: in Explorer, Internet
Options, Connection, Lan Setting and put as Proxy  your firewall IP
ADDRESS.

> What I'm trying to get going is web server publishing. The internal
machine
> is running a web server, http://192.168.1.10 from the ISA will display

> the home page. I have published this using the web publishing wizard, 
> entered 192.168.1.10 as the address of the server but it will not 
> work. From IE on
a
> machine on a separate T1 I get "Page cannot be displayed", the ISA log

> appears to BLOCK the connection, there are entries in the log saying 
> the access on port 80 was bloxked by xxx.xxx.xxx.194

Have you an entry in public DNS with the name of the web site (ie
www.xxxx.com) and using it to connect?? If so you must configure the
publishing rule using that address. From what I know if you publish a
web site using only your public ip it fails (before SP1.. don't know if
it has been corrected).

Stefano


----- Original Message -----
From: "Chris Lawless" <ChrisL@xxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, May 08, 2002 7:34 PM
Subject: [isalist] Help - Web Server Publishing


> http://www.ISAserver.org
>
>
> I must have installed ISA 10 times in the space of a week, I swear it
works
> differently every time!
>
> This time I have two PCs setup. I have a domain controller that is 
> also running IIS as 192.168.1.10 connected to this is the ISA with two

> NICs, inside is 192.168.1.9 outside is xxx.xxx.xxx.194
>
> I've created a protocol rule and the internal machine can browse ok. I

> cannot browse from the ISA despite adding a packet filter for HTTP / 
> 80
but
> that's not the end of thr world.
>
> What I'm trying to get going is web server publishing. The internal
machine
> is running a web server, http://192.168.1.10 from the ISA will display

> the home page. I have published this using the web publishing wizard, 
> entered 192.168.1.10 as the address of the server but it will not 
> work. From IE on
a
> machine on a separate T1 I get "Page cannot be displayed", the ISA log

> appears to BLOCK the connection, there are entries in the log saying 
> the access on port 80 was bloxked by xxx.xxx.xxx.194
>
> There are also a number of connections to Ports 137 and 138 getting
blocked,
> not sure what they are yet.
>
> I have the service pack applied, I've stopped/started services, 
> rebooted
and
> even waited for a while but no joy, am I missing something?
>
> Chris.
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
stefano.peduzzi@xxxxxxxxxxxxx
> To unsubscribe send a blank email to 
> $subst('Email.Unsub')
>
>


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ctu@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
chrisl@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
chrisl@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
creid@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: