RE: Host Server Unreachable
- From: "Wayne Berry" <wayne@xxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 21 Apr 2005 10:27:25 -0700
Ya you are right it is $245 dollars, my mistake. I can't remember what I
Cisco charges me a year for 24x7 support of my PIX 515. I think it is in
the thousands.
-Wayne
-----Original Message-----
From: TRadtke@xxxxxxxxxxxx [mailto:TRadtke@xxxxxxxxxxxx]
Sent: Thursday, April 21, 2005 10:20 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable
http://www.ISAserver.org
Wow, they only charged me $245 on Monday..... Dang inflation....
-----Original Message-----
From: Wayne Berry [mailto:wayne@xxxxxxxxxx]
Sent: Thursday, April 21, 2005 12:17 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable
http://www.ISAserver.org
Well I just called Microsoft Support and open and incident SRX050421602575,
it cost me $265 to get this solved. I am waiting on Hold for Customer
Support, they are reporting a wait of 3 hours and there are 3 people in the
queue right now.
-Wayne
-----Original Message-----
From: Wayne Berry [mailto:wayne@xxxxxxxxxx]
Sent: Tuesday, April 19, 2005 12:42 PM
To: '[ISAserver.org Discussion List]'
Subject: RE: [isalist] RE: Host Server Unreachable
Tom,
Here is the issue:
From My Internal Network I am trying to connect to a web site that is across
the VPN to the Remote Network. However, because ISA 2004 doesn't see the
Remote Network it doesn't know how to make a proxy request for it. So I
thought it the Local Host network could get to the Remote Network then I
could get pages from those web sites on my Internal Network.
DNS For All Networks on the Remote Network. The Only Network that Can't get
to the DNS is the Local Host.
Web Site Is On the Remote Network, Both the Internal (Across ISA As a Proxy)
and the Local Host Can't Access the Web Site. If I don't use ISA as a Proxy
-- i.e. make an SSL connection, there is no problem accessing the web site
on the Remote Network from the Internal Network.
This is what was in my ISA Log when trying to connect from the Internal
Network to the Web Site on the Remote Network:
#Fields: c-ip cs-username c-agent date time
s-computername cs-referred r-host r-ip r-port
time-taken cs-bytes sc-bytes cs-protocol
s-operation cs-uri s-object-source sc-status rule
FilterInfo cs-Network sc-Network error-info
action
10.2.1.1 anonymous Mozilla/4.0 (compatible; MSIE 6.0;
Windows NT 5.1; SV1; .NET CLR 1.0.3705) 2005-04-13 18:24:55
GATEWAY - 10.0.0.22 10.0.0.22 80
20922 438 2185 http GET http://10.0.0.22/ Inet
10065 All Access - Crown Plaza To FiberCloud - Internal
FiberCloud 0x40 Failed
Jim said that this ment:
"That's a failure attempt - the error code is 10065 (Winsock error),
indicating that the upstream server was unreachable."
Which lead me to believe that the Local Host (The ISA Server) doesn't know
how to get to the Remote Network, which it doesn't when testing on the ISA
2004 server with a browser.
-Wayne
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Tuesday, April 19, 2005 12:20 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable
http://www.ISAserver.org
Hi Wayne,
There shouldn't be any reason for the local host network to get to the
remote network.
Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: Wayne Berry [mailto:wayne@xxxxxxxxxx]
Sent: Tuesday, April 19, 2005 2:17 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable
http://www.ISAserver.org
No PIX 515 on the FiberCloud (Rack Side) and ISA 2004 on Office Side
(Crown
Plaza). The strange thing is that everything works from Internal, no
problems, it is just the Local Host that is having trouble getting
across
the VPN.
Should I just shoot myself now?
-Wayne
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Tuesday, April 19, 2005 12:12 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable
http://www.ISAserver.org
Hi Wayne,
Is there an ISA firewall on each end?
Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: Wayne Berry [mailto:wayne@xxxxxxxxxx]
Sent: Tuesday, April 19, 2005 2:06 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable
http://www.ISAserver.org
Dan,
I think you are right, it is probably something about the IPSec
connection.
I wonder if it is because it is Terminating on the External Network?
Maybe
the Local Host needs Access the External network?
-Wayne
-----Original Message-----
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
Sent: Tuesday, April 19, 2005 10:11 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable
http://www.ISAserver.org
Sorry, I haven't set up any IPSec connections like you have, so I'm
afraid I can't be of much help to you.
-----Original Message-----
From: Wayne Berry [mailto:wayne@xxxxxxxxxx]
Sent: Tuesday, April 19, 2005 12:45
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Host Server Unreachable
http://www.ISAserver.org
Dan,
I check this and took some screen shots:
http://www.berryintl.com/isa/prob1.bmp
http://www.berryintl.com/isa/prob2.bmp
http://www.berryintl.com/isa/prob3.bmp
It appears to me in my limited knowledge that I have all the firewall
access
rules set up so that I should be able to Ping the machines at
FiberCloud,
however you can see my Ping results.
Even if Ping didn't work I should be able to access the DNS server at
10.0.0.21 at FiberCloud, however I am getting DNS timeout on nslookup
For some reason my localhost rules are not working like they should.
-0Wayne
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wayne@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wayne@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wayne@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tradtke@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wayne@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
