[isalist] Re: Resolution of wpad/wspad?

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 13 Dec 2006 12:14:29 -0800

http://www.ISAserver.org
-------------------------------------------------------

The process operates thusly:

1. FWC issues DHCP INFORM including option 252 (wpad) 
2. if received, FWC attempts to determine & resolve the hostname portion of 
that data (we'll call it "wpad" for now)
3. if not received, FWC attempts to resolve the name "wpad" via WinSock 
GetAddrInfo() 
------ NOTE: this behavior depends on the host's IP configuration!!! -------
4. if "wpad" name request returns a valid IP, FWC will attempt to:
   a. connect to that IP address on TCP:80
   b. make a "GET /wspad.dat HTTP/1.1" request
5. If #4 succeeds, FWC will use that data to 
   a. determine the source of additional FWC data
   b. connect to the specified host on TCP:1745
   c. issue a FWC data request

Get a network capture and determine what part isn't working right.


-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Ball, Dan
Sent: Wednesday, December 13, 2006 08:32
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Resolution of wpad/wspad?

That was a poor choice of words on my part.  It was my assumption that the FWC 
would do a DNS lookup to resolve the wpad/wspad entries.  After testing this a 
bit, I'm beginning to wonder about that.

 

I'm not entirely sure that Jim still recommends it, but it was discussed awhile 
back that the DNS resolution of the wpad settings was significantly faster than 
the DHCP resolution.  

 

________________________________

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Danny
Sent: Wednesday, December 13, 2006 11:12 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Resolution of wpad/wspad?

 

Hi Jim,

If we do not go the "auto-magic" route, what type of configuration do you 
recommend?

Thanks,

...D

On 12/12/06, Jim Harrison <Jim@xxxxxxxxxxxx> wrote:

http://www.ISAserver.org
-------------------------------------------------------

As soon as you depend on "auto-magic" anything, you're in for a real treat.
Double-check your DNS (or gawd help you, your WINS) server to make sure it has 
the proper records and that it's responding to queries. 
Check your DHCP server to make sure your wpad option (252) is configured 
properly.

IOW, own your network or be owned by it.

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG 
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
------------------------------------------------------- 


-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Ball, Dan
Sent: Tuesday, December 12, 2006 12:00
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Resolution of wpad/wspad?

http://www.ISAserver.org
-------------------------------------------------------

Had a bit of a problem this morning... Internet browsing traffic became 
extremely sluggish, so I tried it on another computer and it too was sluggish.  
I looked on the ISA server, and traffic going over the Internet NIC dropped to 
almost nothing.  I opened up the FWC and clicked on "Detect Now", it hung there 
for a minute and then failed to find the server. 

So, I dropped to a command prompt and did a lookup on wpad and wspad, both of 
which resolved instantly.  Then, all of a sudden, everything started to work 
again!

Why would doing a simple DNS lookup for wpad/wspad (I tried both, so I'm not 
sure which one did it) get everything working again?  Doesn't the FWC do that 
automagically? 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites: 
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx




-- 
CPDE - Certified Petroleum Distribution Engineer
CCBC - Certified Canadian Beer Consumer 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: