RE: Proxy vs. Firewall routing

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 22 Jan 2003 20:07:33 -0600

Hi Nelson,

You need to complete your split DNS! :-) Also, make sure that you configure 
your clients as Web Proxy clients and that they use the autoconfiguration 
script so that they can use Direct Access for internal network servers.

HTH,
Tom
www.isaserver.org/shinder


-----Original Message-----
From: Nelson Camacho [mailto:ncamacho@xxxxxxxxxxxxxxx] 
Sent: Wednesday, January 22, 2003 4:48 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Proxy vs. Firewall routing


http://www.ISAserver.org


Hi,

Both client and servers are in the internal interface of the ISA Server.

I've read Jim Harrison article 
http://isaserver.org/articles/14120_Errors_Discussion_and_Solution.html

It seems like the problem described there where a LAT host makes a request for 
an ISA-Published server, the result is ISA trying to create a packet where 
source and destination is the same.

I have two different DNS Servers one for the internal domain and another for 
the external domain, both clients and ISA seems to resolve both domains OK, but 
i have the same problem clients can 'browse' but cant do a telnet using the 
published IP.

nelson camacho

-----Mensagem original-----
De: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Enviada: terça-feira, 21 de Janeiro de 2003 23:47
Para: [ISAserver.org Discussion List]
Assunto: [isalist] RE: Proxy vs. Firewall routing


http://www.ISAserver.org


Hi Nelson,

I'm a little unclear here.

Where is the Telnet client?

Where is the ISA Server?

Where is the Telnet server?

Thanks!
Tom
www.isaserver.org/shinder


-----Original Message-----
From: Nelson Camacho [mailto:ncamacho@xxxxxxxxxxxxxxx] 
Sent: Tuesday, January 21, 2003 9:16 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Proxy vs. Firewall routing


http://www.ISAserver.org


Hi,

I'm having some trouble understand how does ISA do the routing.
 
The question is: 

if i can, from the inside net, browse a web site pointing to a external
IP of a published web site, why can't i telnet to the same IP of a
published telnet server? 

Outside users can access both servers.

thank for your help

nelson camacho

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
ncamacho@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: