Re: Many Web Pages are not opening - Please help and advice
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 29 Apr 2004 07:30:54 -0500
Hi Ahmed,
The only way you can know for sure is to do a Netmon trace on the
connections. It could just be that the clients are not configured
correctly: I.e., you haven't configured them to be Web Proxy clients
using the autoconfig script.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Nabil, Ahmed [mailto:anmahmou@xxxxxxxxxx]
Sent: Thursday, April 29, 2004 7:27 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Many Web Pages are not opening - Please help and
advice
http://www.ISAserver.org
I think its a DNS problem because the error message I get is always "The
Web site cannot be found " and this problem is not only for Yahoo but
many many other sites some of them are very familiar like Compaq and
some are not well known sites. If you tried after an hour or two it just
work !!!!!
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Thursday, April 29, 2004 2:22 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Many Web Pages are not opening - Please helpand
advice
http://www.ISAserver.org
Hi Nabil,
The Web Proxy and Firewall clients use the DNS cache in their respective
services by default.
SecureNAT clients resolve the names themselves.
Are you sure this is a DNS problem? Another issue is that I believe that
yahoo.com has so many entries, that you must allow for TCP queries,
since there are too many entries to fit into a single UDP message.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Nabil, Ahmed [mailto:anmahmou@xxxxxxxxxx]
Sent: Thursday, April 29, 2004 7:11 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Many Web Pages are not opening - Please helpand
advice
http://www.ISAserver.org
Tom,
Sorry for the many questions but i am confused now. Could you please
briefly explain what is the use of this Keys. As far as i understand
there is a local name cache for names that have been resolved via
queries to DNS servers. Since it resides in memory, this is the first
choice for resolution of fully qualified domain names, or FQDN.
Resolved names are kept until the respective TTL expires which is 6
hours then they are deleted.
This means that any name resolved by the WEB proxy service will remain
in the ISA DNS proxy cache for six hours except if the client have an IP
for a DNS then it will use it first.
Now in my case why was this giving me a problem. For example yahoo .com
was resolved and the resolving is cached and then you try to open before
the six hours and it didn't open, nothing is changed I guess !!!!!!!
Thats confusing.
Please advice.
Thanks in advance.
Ahmed
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Thursday, April 29, 2004 1:19 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Many Web Pages are not opening - Please helpand
advice
http://www.ISAserver.org
Hi Ahmed,
Cause that is how ISA works. You can edit the Registry to change the
default behavior.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Nabil, Ahmed [mailto:anmahmou@xxxxxxxxxx]
Sent: Thursday, April 29, 2004 5:52 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Many Web Pages are not opening - Please helpand
advice
http://www.ISAserver.org
But why is it ignoring the TTL or not obeying it ??
Thanks and have a nice day,
Ahmed Nabil
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Tuesday, April 27, 2004 3:03 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Many Web Pages are not opening - Please helpand
advice
http://www.ISAserver.org
The default isn't zero.
This is ISA's "local" name resolution cache.
The problem is that it doesn't obey record TTL.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
On Tue, 27 Apr 2004 11:42:44 +0200
"Nabil, Ahmed" <anmahmou@xxxxxxxxxx> wrote:
http://www.ISAserver.org
Jim,
It seems to be working fine now. I don't yet understand why was this
setting making this problem. Is the default setting while installing ISA
in this registry key is Zero, if so then how it became this large number
??
Your comments is highly appreciated.
Thanks and have a nice day,
Ahmed
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Thursday, April 22, 2004 3:38 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Many Web Pages are not opening - Please helpand
advice
http://www.ISAserver.org
You might want to try reducing or eliminating your ISA DNS cache.
This article discusses how to do that:
http://www.isaserver.org/tutorials/ISA_Clients__Part_1__General_ISA_Serv
er_Configuration.html
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
On Thu, 22 Apr 2004 08:54:46 +0200
"Nabil, Ahmed" <anmahmou@xxxxxxxxxx> wrote:
http://www.ISAserver.org
Good morning All,
I re-checked my DNS forwaders on my DNS Server and they are correct
(pointing to our ISP), I believe the problem is the internet DNS
resolution through ISA. Please advice. this is very irritating problem.
Sometimes I can't open any sub pages from yahoo, Microsoft & NAI and
then after a couple of hours they are opened fine and another set of
pages is down.
This morning I tried to open a normal page and here is what I get.
The Web site cannot be found
The Web site you are looking for is unavailable due to its
identification configuration settings.
------------------------------------------------------------------------
--------
Please try the following:
Click the Refresh button, or try again later.
If you typed the page address in the Address bar, make sure that it is
spelled correctly.
Click the Back button to try another link.
11001 - Host not found
Internet Security and Acceleration Server
------------------------------------------------------------------------
--------
Technical Information (for support personnel)
Background:
This error indicates that the gateway could not find the IP address of
the Web site you are trying to access.
I checked the Web Proxy log for my request and attached below the line
extracted from the log.
10.202.80.108, anonymous, Mozilla/4.0 (compatible; MSIE 6.0; Windows NT
5.0; .NET CLR 1.1.4322), -, 4/21/2004, 8:21:25, -, ISA Server name, -,
www.socks.permeo.com, -, 80, 0, 301, 0, http, -, GET,
http://www.socks.permeo.com/AboutSOCKS/SOCKSOverview.asp, -, Inet,
11004, -, -, -
When i clear the cache and restart the server, every thing works fine
for sometime.
Please advice and help.
Thanks and have a nice day,
Ahmed
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
anmahmou@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
