RE: ISA resolving URL through internal DNS
- From: "Greg Mulholland" <greg@xxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Sun, 29 Jan 2006 17:33:49 +1100
Did you allow the internal DNS server access to the web using DNS or was
it just the users.
try this from the dns server and the clients
c:\>nslookup server= ns1.afraid.org (or your isp's nameserver)
Greg Mulholland
ATM is for banks!
________________________________
From: Hashem Safadi [mailto:hashem.safadi@xxxxxxxxx]
Sent: Sunday, January 29, 2006 4:14 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA resolving URL through internal DNS
http://www.ISAserver.org
Yes I have create a rule that allow the internal DNS to send DNS and DNS
server protocol outbound but users can't access the internet.
when I use NSlookup and I query and internal server by writing it name
it gives me its ip address but when I query it for example www.yahoo.com
it times out.
in the monitoring in ISA each time I open a http page at a client. the
monitor gives me that the client initiate a connection with the ISA
server then the ISA send a DNS request to internal DNS server. and
that's it. nothing happen after that the another packets from the client
send to the ISA are Denied and they are http with port 8080.
On 1/28/06, Thomas W Shinder <tshinder@xxxxxxxxxxx> wrote:
http://www.ISAserver.org
Hi Hashem,
Did you create a rule that enables outbound DNS for the DNS
server?
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**
> -----Original Message-----
> From: Hashem [mailto:hashem.safadi@xxxxxxxxx ]
> Sent: Saturday, January 28, 2006 11:36 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] ISA resolving URL through internal DNS
>
> http://www.ISAserver.org
>
> Dear All,
> I have a domain with it internal DNS. and I have another
> server as a
> member in the domain with ISA 2004 on it. and my clients has
Firewall
> clients. I configure the ISA server NIC cards as follow
>
> Internal NIC:
> IP 192.168.0.15
> Sub 255.255.255.0
> DG
> DNS 192.168.0.1
>
> Internal NIC:
> IP 11.0.0.11
> Sub 255.255.255.0
> DG 11.0.0.2
> DNS
>
> So that all the DNS request will be solved on my internal
> DNS. what I want
> from the internal DNS to do is to resolve the internet
> address requested
> by our clients. I have put the the ISP DNS in the forwarder in
our
> internal DNS. but that didn't work. clients can't access the
internet.
>
> what should I do.
>
>
> ------------------------------------------------------
> List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other
sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion
List as: hashem.safadi@xxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------ List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server
Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server
FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------ Visit
TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------ You are currently
subscribed to this ISAserver.org Discussion List as: greg@xxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
