OK, time for the definitive answer. Read the article on installing DNS on ISA firewalls over at www.isaserver.org HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, October 28, 2003 8:13 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: OWA with SSL Certificate http://www.ISAserver.org Now I'm getting the dreaded proxy chain loop, and it's all correct.......waaaahhhhhhhhhhhhhh!!! At least it's getting to the webserver now S -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Tuesday, October 28, 2003 9:54 PM To: Isa Weblist http://www.ISAserver.org Hi Steve, Check out the ISA Server 2000 Exchange 2000/2003 Deployment Kit! (I had to say that for Greg) :-) What I would do in this situaiton is: 1. Use the same FQDN in the redirect in the Web Publishing Rule as that included in the Destinantion Set 2. Create a HOSTS file entry on the ISA Server firewall that includes that FQDN and map it to the internal address of the Web site. HTH, Tom www.isaserver.org/shinder -----Original Message----- From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, October 28, 2003 7:45 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: OWA with SSL Certificate http://www.ISAserver.org Hi Tom I had a look at Qusai's setup and did the cert config and importing, (not the first I may add, tho' it is the first that has given this error) I have imported the cert into the trusted autaurity stores on the webserver and the Isa server, and also imported them into the computer store also. 1 thing with qusai's setup, he publishes a public dns server on the ISA server and all the ip addresses for his domain point to the external address. This is how it has to be done at the moment according to Qusai, if however, I put the ip address of his internal dns server in the dns settings would that stop any looping etc? Steve -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Tuesday, October 28, 2003 9:27 PM To: Isa Weblist http://www.ISAserver.org Hi Qusai, Go to www.isaserver.org and do a search for "500" in the Search box there. HTH, Tom www.isaserver.org/shinder -----Original Message----- From: Qusai Ali AL Haddad [mailto:qusai@xxxxxxxxxxxxxx] Sent: Wednesday, October 29, 2003 1:10 AM To: [ISAserver.org Discussion List] Subject: [isalist] OWA with SSL Certificate http://www.ISAserver.org Dear All i have installed OWA with SSL certificate https://webmail.hostname.com the certificate appear when i accept the certificate it gives me this error msg 500 Internal Server Error - The certificate chain was issued by an authority that is not trusted. (-2146893019) Internet Security and Acceleration Server I have internal DNS on exchnage server and External DNS in ISA Server any help regards to all Qusai A. Al Haddad ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: steve@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') This E-Mail is confidential. It is not intended to be read, copied, disclosed or used by any person other than the recipient named above. Unauthorised use, disclosure, or copying is strictly prohibited and may be unlawful. Optimum IT Solutions disclaims any liability for any action taken in connection of this E-Mail. The comments or statements expressed in this E-Mail are not necessarily those of Optimum IT Solutions or its subsidiaries or affiliates. administrator@xxxxxxxxxxxxxxxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: steve@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')