RE: Pblishing Pcanyhwere Behind isa
- From: "Karthik Janakiraman" <KarthikJ@xxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 17 Jan 2003 11:42:23 -0500
Let me tell you what I have done. I have a dns server x.x.x.x2 which is
registered with the internic. I moved that system behind the ISA
firewall and gave ip address 192.168.15.12. I created two Server
publishing rule one for dns querry and the other for dns zone transfer
mapping 192.168.15.211 and x.x.x.x2. The external ip I added in the ISA
Server external interface card as secondary ip address. In the dns
server I created an entry karthik.mydomain.com pointing to
x.x.x.x3(which is my web server ip). Then I created a destination set
and in the name I gave http://karthik.icode.com and pointed it the
private ip 192.168.15.2. Then went to the server properties and changed
the incoming web requests to listen to individual ips and selected the
isaserver name in the name list and gave the external ip address of my
web server which I have already added in the external interface of my
isa server as the third ip address. Now from outside when I try by ip
address x.x.x.x2 it works fine but when I gave by name it does not work
and give me 403 error. I had configured my internal dns also to point to
192.168.15.2 for http://karthik.mydomain.com. ?
If my destination set is not correct, how can I reconfigure my
destination set. Also I believe when my dns is outside the firewall I am
able to use the dns from any external system and it resolves correctly.
But when I keep it inside the firewall my systems outside the network
cannot use the dns to resolve the name to ip. Can you advice me how to
proceed since my entire testing for using this firewall for our network
is getting stopped because of this since we host our own web and dns
servers.
Thanks in Advance
J.Karthik
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Thursday, January 16, 2003 8:54 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Pblishing Pcanyhwere Behind isa
http://www.ISAserver.org
Hi J,
Sounds like your Destination Set needs to be reconfigured. What is the
entry in the Destination Set that you're using in the Web Publishing
Rule? Remember that it must exactly match what the external user uses
for the FQDN.
HTH,
Tom
www.isaserver.org/shinder
-----Original Message-----
From: Karthik Janakiraman [mailto:KarthikJ@xxxxxxxxx]
Sent: Thursday, January 16, 2003 3:50 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Pblishing Pcanyhwere Behind isa
http://www.ISAserver.org
Sorry for bothering you again. I had configured the DNS Server which I
placed inside the ISA firewall and configured in the Server publishing
Rule. When from outside by typing in the ip address I am able to browse
the web site but when I type in the name I am getting error message like
403 Forbidden - The server denies the specified Uniform Resource Locator
(URL). Contact the server administrator. (12202)
Internet Security and Acceleration Server
When I am trying using the name I am able to see in the session screen
on the ISA Management that a web session for the ip address is initiated
and it is giving my public address also correctly. Should I do any
changes on the firewall?
Thanks for your time and sorry again for bothering.
Thanks and Regards
J.Karthik
-----Original Message-----
From: John Tolmachoff [mailto:isalist@xxxxxxxxxxxx]
Sent: Thursday, January 16, 2003 2:25 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Pblishing Pcanyhwere Behind isa
http://www.ISAserver.org
> Thanks a lot. It worked after opening special ports for dns and
> pcanyhwere.
We aim to please. :))
John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
karthikj@xxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
karthikj@xxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
