RE: RainConnect Help anyone?
- From: "Ball, Dan" <DBall@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 8 Feb 2006 19:06:14 -0500
Jim, I "may" have found a solution for this issue! My last response
from Rainfinity support was from a different person, possibly this
person knows what they are doing... Anyways, it appears that their
manuals are sticking to their tradition in that while all the
information is there, you have to know what you're looking for before it
makes any sense.
This tech found two problems, the first was that the DNS entry was
configured to load balance, but was also set to use a preferred ISP.
How this is configured via the MMC I haven't figured out yet, but the
tech described a way to configure it via the command-line.
The second problem is the most likely culprit of both of our problems,
in that I had no port forwarding rules defined. I do not remember this
from the previous version, so it must be a new feature. Basically, you
have to define all the incoming traffic by IP, protocol, and port to
tell the system what to do with it (Lots of rules to create!). Then, it
will forward the incoming traffic from ISP 2 to the IP address of the
ISA server so that it recognizes it as a valid IP. THAT is the reason
why incoming traffic is failing at the Default Rule in the ISA server,
it doesn't recognize the IP it is coming from...
If you want me to forward you the e-mail (offline) I received that
spelled out the steps pretty well, let me know...
________________________________
From: Jim Huntington - Footprints Developments Ltd
[mailto:james@xxxxxxxxxxxxxxxxx]
Sent: Wednesday, February 08, 2006 1:42 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: RainConnect Help anyone?
http://www.ISAserver.org
We have this exact problem too - at the same time as we upgraded to the
latest version of Rainconnect, we changed the public IP address range of
one of the ISP's and we thought this caused our problem. Assuming you
didn't change anything during the upgrade then I guess we both have the
same problem caused by the upgrade. We cannot reproduce this in our test
environment so have come to the conclusion that only a rebuild from
scratch will fix it. The problem is we can't get any downtime until
mid-March, so if you manage to get anywhere with it I'd be really
interested in your results.
We have also triple checked everything, so this cannot be a coincidence.
Not much help I know, but at least you have a buddy with the same
problem!
________________________________
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx]
Sent: 08 February 2006 02:30
To: [ISAserver.org Discussion List]
Subject: [isalist] RainConnect Help anyone?
http://www.ISAserver.org
I've been going over this installation for about a month now, and
neither I nor the Rainfinity support people can figure it out... I
installed the newest version of RainConnect, and it hasn't worked right
since.
In summary: I have two ISPs connected to my ISA 2004 server, the primary
ISP works fine inbound and outbound, but the secondary ISP only works
outbound.
As a temporary measure, I removed the secondary IP from the DNS records,
so inbound traffic is using only the main ISP. So, all of my testing
(VPN and HTTP) is by using the IP address instead of the hostname. So
far, the only common denominator is that all the connections error out
on the default rule. I've double and triple and quadruple checked all
of the settings, and cannot figure out why none of the rules seem to
take effect.
Anyone have any ideas?
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
james@xxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
________________________________
E-mail Disclaimer
This message is intended solely for the use of the individual or
organisation to whom it is addressed. It may contain privileged or
confidential information. If you have received this message in error,
please notify the originator immediately. If you are not the intended
recipient, you should not use, copy, alter, or disclose the contents of
this
message. All information or opinions expressed in this message and/or
any
attachments are those of the author and are not necessarily those of the
originating organisation or its affiliates. This message has been swept
for
viruses and malicious software on leaving our system. No liability will
be
accepted for loss or damage caused by its use.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
dball@xxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
