RE: ISA and IIS on the same box

  • From: "Clayton Doige" <Clayton.Doige@xxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 2 May 2003 15:23:55 +0100

As I am learning :-) Does it make a good bouillabaisse?

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: Friday, May 02, 2003 3:09 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA and IIS on the same box

http://www.ISAserver.org


Hi Clayton,

IIS 6.0 is a "different kettle of fish" :)

Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Clayton Doige [mailto:Clayton.Doige@xxxxxxxxxxxxxxxx] 
Sent: Friday, May 02, 2003 8:49 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA and IIS on the same box


http://www.ISAserver.org


This is what I found:

How to Disable Socket Pooling
PSS ID Number: Q238131
Article Last Modified on 10-22-2000
 
The information in this article applies to: 
*       Microsoft Internet Information Services 5.0
 

Summary
You may need to disable socket pooling under the following conditions: 
*       A low number of sites are being hosted. 
*       There are special security concerns. 
*       Another application or server has need of port 80 on an IP
address. 

More Information
Socket pooling causes Internet Information Services (IIS) 5.0 to listen
to all IP addresses, which can present a possible security risk for
secure domains with multiple networks. Also, bandwidth throttling and
performance adjustments will apply to all Web sites configured for the
same port (for example port 80). If bandwidth throttling or performance
tuning is being done on a per-site basis, socket pooling will need to be
disabled. 

To disable socket pooling, perform the following steps: 
1.      Start the command prompt and make sure you are in the
X:\Inetpub\Adminscripts folder (where X is the IIS installation drive).
To do this, type the following lines at the command prompt: 
X:

CD\Inetpub\Adminscripts 
2.      After you open the Adminscripts folder, type the following line
at the command prompt: 
cscript adsutil.vbs set w3svc/disablesocketpooling true 
3.      The command replies as follows: 
disablesocketpooling : (BOOLEAN) True 
4.      Stop and start the IISAdmin service. 
5.      Restart the WWW service. 
Additional query words: iis 
Keywords: 
Issue Type: kbinfo 
Technology: kbiisSearch kbiis500

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: Friday, May 02, 2003 2:45 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA and IIS on the same box

http://www.ISAserver.org


Hi Jim,

I believe that the method to disable socket pooling for the SMTP, NNTP,
FTP, POP3, and IMAP4 services (IMAP4 only if Exchange is running on it)
are a "State's Secret". The method for disabling socket pooling for the
W3SVC is discussed at
http://support.microsoft.com/default.aspx?scid=kb;en-us;331062 where you
use the httpcfg command.  But I believe you have to edit an XML file
(not otherwise specified - NOS) to disable socket pooling for the other
services.

If you have some "inside info" on this, I'd be happy to put it up as a
FAQ @ ISAServer.org (or you can put it up if you want ;-) )

Thanks!
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: Friday, May 02, 2003 8:24 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA and IIS on the same box


http://www.ISAserver.org


..it's all in here:
http://microsoft.com/ISAServer/TechInfo/Deployment/WindowsServer2003.asp

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!



http://www.ISAserver.org


Hi, thanks, .net RC2, just playing to learn really.

Will see about socket pooling, as I have now done everything else you
mention but that.

Thanks again

Clayton

-----Original Message-----
From: Paul Nuernberger [mailto:pen@xxxxxxxxx] 
Sent: Thursday, May 01, 2003 9:09 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA and IIS on the same box

http://www.ISAserver.org


Publish IIS on the internal nic only, disable socket pooling, and create
a
web-publishing rule that redirects it to the internal nic (Is this on a
SBS
box BTW ?).

Paul Nuernberger

-----Original Message-----
From: Clayton Doige [mailto:Clayton.Doige@xxxxxxxxxxxxxxxx]
Sent: Thursday, May 01, 2003 2:02 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA and IIS on the same box


http://www.ISAserver.org


Forgive the neophyte question please.

If I want to make a website available to the outside world, and have IIS
running on the same box as the ISA Server, I am aware that ISA grabs
port
80.

In IIS I created a site using a different port.

When I conect from internally specifying the por number in the browser,
it
comes up (http://machine_name/site_name:port#)

However, from the net, I can't seem to get any joy, even via IP:port#

I created a publishing rule that was pretty open, and for the HTTP
protocol
on the actions tab for the rules properties, I specified the Port number
I
defined for the site in IIS.

HTTP 503 comes up, so the server is dropping the packets I beleive, but
why
dam*it, why???

TIA for any feedback, and sorry for the simple question, I just cannot
remember haw to do it!!!!

Clayton


**************************Our offer**********************************
Services: Temporary and permanent recruitment consultancy, jobs viewable
online (www.locumgroup.com) and Continuing Professional Development
training.
Offices: England, Wales, Scotland, Ireland, Australia, New Zealand and
Canada.
Professions: Allied Health, Primary Care, Medical, Social Care and
Education.
***********************Disclaimer**********************************
Internet Communications are not secure therefore Locum Group Ltd does
not accept legal responsibility for the contents of this message. Any
views or opinions presented are solely those of the author and do not
necessarily represent those of Locum Group Ltd unless otherwise
specifically stated.
Locum Group Ltd, 287-289 Cranbrook Road, Ilford, Essex IG1 4UA.
*********************************************************************


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
pen@xxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
clayton.doige@xxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')


**************************Our offer********************************** 
Services: Temporary and permanent recruitment consultancy, jobs viewable

online (www.locumgroup.com) and Continuing Professional Development 
training. 
Offices: England, Wales, Scotland, Ireland, Australia, New Zealand and 
Canada. 
Professions: Allied Health, Primary Care, Medical, Social Care and 
Education. 
***********************Disclaimer********************************** 
Internet Communications are not secure therefore Locum Group Ltd does 
not accept legal responsibility for the contents of this message. Any 
views or opinions presented are solely those of the author and do not 
necessarily represent those of Locum Group Ltd unless otherwise 
specifically stated. 
Locum Group Ltd, 287-289 Cranbrook Road, Ilford, Essex IG1 4UA. 
********************************************************************* 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
clayton.doige@xxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')


**************************Our offer********************************** 
Services: Temporary and permanent recruitment consultancy, jobs viewable

online (www.locumgroup.com) and Continuing Professional Development 
training. 
Offices: England, Wales, Scotland, Ireland, Australia, New Zealand and 
Canada. 
Professions: Allied Health, Primary Care, Medical, Social Care and 
Education. 
***********************Disclaimer********************************** 
Internet Communications are not secure therefore Locum Group Ltd does 
not accept legal responsibility for the contents of this message. Any 
views or opinions presented are solely those of the author and do not 
necessarily represent those of Locum Group Ltd unless otherwise 
specifically stated. 
Locum Group Ltd, 287-289 Cranbrook Road, Ilford, Essex IG1 4UA. 
********************************************************************* 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
clayton.doige@xxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')


**************************Our offer********************************** 
Services: Temporary and permanent recruitment consultancy, jobs viewable 
online (www.locumgroup.com) and Continuing Professional Development 
training. 
Offices: England, Wales, Scotland, Ireland, Australia, New Zealand and 
Canada. 
Professions: Allied Health, Primary Care, Medical, Social Care and 
Education. 
***********************Disclaimer********************************** 
Internet Communications are not secure therefore Locum Group Ltd does 
not accept legal responsibility for the contents of this message. Any 
views or opinions presented are solely those of the author and do not 
necessarily represent those of Locum Group Ltd unless otherwise 
specifically stated. 
Locum Group Ltd, 287-289 Cranbrook Road, Ilford, Essex IG1 4UA. 
********************************************************************* 



Other related posts: