You need to run the "Configure Internet Information Services" wizard from the Administrator Console MMC (top of Start Menu). The To Do List will quickly become your best friend, as will that console, in SBS. Running through the wizards & tasks in the To Do List is mandatory fro proper & secure operation of SBS. Paul Nuernberger -----Original Message----- From: James May [mailto:Jmay@xxxxxxxxxxxxx] Sent: Thursday, October 16, 2003 11:14 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: ISA Server on same machine as IIS http://www.ISAserver.org I had the same problem when I set up SBS,currently I am doing what Paul is saying not to do relying on packet filters.... maybe I can lean something here. Maybe I went wrong when I didn't use the wizard? I got my website up and running fine both internal and external using destination sets or publishing where I ran into trouble is I couldn't get OWA working on the remote side unless I published it using port 80 this is not recommended in the isa server book or on the isaserver.org site. Here is my config Split DNS disabled socket pooling w3svc service ftp and smtp. Website assigned the public ip and the host A records for www pointing to public on the internal DNS server ip packet filters for created for the ip. The problem here internal web access loops around the fire wall. Jim -----Original Message----- From: Paul Nuernberger [mailto:pen@xxxxxxxxx] Sent: Thursday, October 16, 2003 8:44 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: ISA Server on same machine as IIS http://www.ISAserver.org If you followed the wizards properly, then the setup would have removed 'socket pooling' for IIS so that it only listens on the internal interface (it would have asked you for the IP address of the internal interface). This being the case, you would have to 'publish' your web site in ISA using web publishing (& preferably also use a destination set to limit what ISA passes to IIS). It would also be a good thing to look at what headers your IIS site is looking for (i.e. www.mysite.tld and mysite.tld), and make sure to pass the original headers to IIS (in web publishing). Review the docs and help file, as well as stuff at www.isaserver.org, and you will see how these all work together. If you are relying on using packet filters to get to your IIS web site - don't. Only use web publishing. Paul Nuernberger -----Original Message----- From: DH [mailto:david.harkins@xxxxxxxxxxxxxxxxx] Sent: Thursday, October 16, 2003 10:35 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: ISA Server on same machine as IIS http://www.ISAserver.org Sorry that should read SBS (Small business server) not SDS. It's a standard install and I can't access my website outwith the network. I do have a public IP for the website and it is configured on DNS, can view it internally. Thanks. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jmay@xxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: pen@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')