RE: Problems with ISA install...no Internet
- From: "Marvin Cummings" <marvc@xxxxxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 21 Apr 2004 19:25:43 -0400
This is what always gets me so after removing and configuring the cache only
dns server on the ISA server I see that I'm able to ping and do an nslookup
on external resources on the client system. I still get a page not found
error when trying to browse a web site. I also get 403 forbidden - The ISA
server denies URL 12202.
Thanks
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Wednesday, April 21, 2004 7:06 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Problems with ISA install...no Internet
http://www.ISAserver.org
Hi Marvin,
It sounds like a name resolution issue. Can I suspect there is a config
problem at the DNS server, or the DNS caching-only forwarder on the ISA
box (the article recommends that you using a caching-only forwarder,
unless you're really sure what you're doing with DNS).
Are the clients configured to use a DNS server that can resolve Internet
host names? You might try testing by configuring a client to use your
ISP's DNS server.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Marvin Cummings [mailto:marvc@xxxxxxxxxxxxx]
Sent: Wednesday, April 21, 2004 6:00 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Problems with ISA install...no Internet
http://www.ISAserver.org
Hey
A client with a status or dynamic private address gets a "Page not found
error" when attempting to browse the internet and gets "Ping could not
find
host www.blah.com. Please check ....
I've also enabled the rules fields for firewall and web proxy log
config.
The initial plan was to use NAT, do I now need to configure these
options?
Thanks
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Wednesday, April 21, 2004 6:51 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Problems with ISA install...no Internet
http://www.ISAserver.org
Hi Marvin,
When the SecureNAT clients try to access the Internet, what error do
they see?
Also, go into the firewall and Web Proxy log configuration and enable
the Rule#1 and Rule#2 fields.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Marvin Cummings [mailto:marvc@xxxxxxxxxxxxx]
Sent: Wednesday, April 21, 2004 5:41 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Problems with ISA install...no Internet
http://www.ISAserver.org
Hey Tom
Thanks for the quick reply. I'm using secure NAT. The nics are connected
to the network as follows:
Internal - to 3COM switch which is connected to the network.
External - to 3COM sdsl modem
I see 2 files in the ISAlogs folder "fwsextd20040421" &
"ippextd20040421". I see the IP of the ISA server listed under
Filter-rule as blocked and allowed a few times. What exactly should I be
looking for?
Thanks
.
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Wednesday, April 21, 2004 6:11 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Problems with ISA install...no Internet
http://www.ISAserver.org
Hi Marvin,
What client type?
What error do you receive?
Are the internal and external interfaces connected to the Network?
What errors appear in the Event Log?
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA 2004 Beta - Get it now!
http://www.microsoft.com/isaserver/beta/default.asp
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Marvin Cummings [mailto:marvc@xxxxxxxxxxxxx]
Sent: Wednesday, April 21, 2004 5:06 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Problems with ISA install...no Internet
http://www.ISAserver.org
I just finished installing ISA on a w2k3 server with dual nics, internal
private and external static IP's, on an SDSL data line, no dial up. This
is on a w2k3 network with an internal AD dns server. I next create an
"all access" policy and disable the HTTP director. This is all according
to the "quickstart guide". I've also added the ISP static DNS server
IP's as Forwarders on my AD server. Yet I'm still unable to access the
Internet. My nics are configured as follows:
Internal:
IP: 192.168.1.x
Subnet: 255.255.255.0
Gateway: 0.0.0.0
DNS: 192.168.1.x - IP of internal AD server
External:
IP 205.179.x.x
Subnet: 255.255.255.x
Gateway: 205.179.x.x
DNS: 0.0.0.0
Can someone advise me on what I'm doing wrong?
Many thanks in advance
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
marvc@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
marvc@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
marvc@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
