Re: LATDMZ

From: "Jeffrey Zhang" <zhangjb2@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Date: Thu, 6 Mar 2003 23:48:28 -0500
MessageHi Tom,

Yes, you got the right network structure, a tri-homed ISA server, two different 
subnets for internal and DMZ, an external network to internet, web server and 
FTP server is in DMZ.

I'd like to let clients in internal network to access web and FTP server in 
DMZ, and external clients can also access them.

I read your chapter 4 and understand 3 methods to control the traffic between 
internal network and LATDMZ, but my problem is before the first step, you 
describe that if I connect two subnets to ISA and enable the IP Routing, they 
can communicate each other. I did but I can not access DMZ from internal net. 

Where do I need to check?

thanks 
Jeffrey
  ----- Original Message ----- 
  From: Tom Mendelboim 
  To: [ISAserver.org Discussion List] 
  Sent: Thursday, March 06, 2003 6:00 PM
  Subject: [isalist] Re: LATDMZ


  http://www.ISAserver.org



  This is a multi-part message in MIME format.



------------------------------------------------------------------------------


  Let me get it straight.

  You have three interfaces on the ISA. One with "Legal" IP on the internet, 
one with local IP as the DMZ brench and one with a different local IP (or 
different subnet) on the last interface.

  What type of communications you are trying to establish between the Local 
network and the Local DMZ network?

  Who is initiating the traffic?

  Tom
  > 
  > From: "Zhangjb2" <zhangjb2@xxxxxxxxxxx>
  > Date: 2003/03/06 Thu PM 04:54:43 EST
  > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  > Subject: [isalist] Re: LATDMZ
  > 
  > http://www.ISAserver.org
  > 
  > 
  > MessageHi Tom,
  > 
  > I created the IP packet filters, but I can not access LATDMZ. Actually when 
just created internal, LATDMZ and external networks, I can not access LATDMZ, 
but I can access external network (internet). Could you give any suggestion on 
how to check?
  > 
  > thanks
  > Jeffrey
  >   ----- Original Message ----- 
  >   From: Zhangjb2 
  >   To: [ISAserver.org Discussion List] 
  >   Sent: Wednesday, March 05, 2003 4:57 PM
  >   Subject: LATDMZ
  > 
  > 
  >   Hi Tom,
  > 
  >   I created a LATDMZ behind ISA server, I enabled IP routing in ISA, but my 
internal clients cannot access server in LATDMZ. Can you give any suggestion to 
figure out this problem?
  > 
  >   Thanks
  >   Jeffrey
  > 
  > ------------------------------------------------------
  > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
  > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
  > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
  > ------------------------------------------------------
  > Exchange Server Resource Site: http://www.msexchange.org/
  > Windows Security Resource Site: http://www.windowsecurity.com/
  > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
  > ------------------------------------------------------
  > You are currently subscribed to this ISAserver.org Discussion List as: 
tomerm1@xxxxxxx
  > To unsubscribe send a blank email to $subst('Email.Unsub')
  > 
  > 



------------------------------------------------------------------------------


  http://www.ISAserver.org


  Hi Tom,
   
  I created the IP packet filters, but I can not access LATDMZ. Actually when 
just created internal, LATDMZ and external networks, I can not access LATDMZ, 
but I can access external network (internet). Could you give any suggestion on 
how to check?
   
  thanks
  Jeffrey
    ----- Original Message ----- 
    From: Zhangjb2 
    To: [ISAserver.org Discussion List] 
    Sent: Wednesday, March 05, 2003 4:57 PM
    Subject: LATDMZ


    Hi Tom,
     
    I created a LATDMZ behind ISA server, I enabled IP routing in ISA, but my 
internal clients cannot access server in LATDMZ. Can you give any suggestion to 
figure out this problem?
     
    Thanks
    Jeffrey
  ------------------------------------------------------
  List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
  ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
  ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
  ------------------------------------------------------
  Exchange Server Resource Site: http://www.msexchange.org/
  Windows Security Resource Site: http://www.windowsecurity.com/
  Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
  ------------------------------------------------------
  You are currently subscribed to this ISAserver.org Discussion List as: 
tomerm1@xxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub') 


------------------------------------------------------------------------------


  ------------------------------------------------------
  List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
  ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
  ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
  ------------------------------------------------------
  Exchange Server Resource Site: http://www.msexchange.org/
  Windows Security Resource Site: http://www.windowsecurity.com/
  Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
  ------------------------------------------------------
  You are currently subscribed to this ISAserver.org Discussion List as: 
zhangjb2@xxxxxxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub')
Re: LATDMZ

Other related posts:
