RE: SSL Listenter Issue
- From: "William Holmes" <wtholmes@xxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 14 Jan 2005 19:49:30 -0500
Hello,
So what is the point of web publishing then? I have several different web
servers that I publish using ISA. Paths are used to direct the request to
the appropriate internal web server. ISA Server allows all thease servers to
be made available through a single name space. This is very important to me
and it works just fine except for SSL connections.
Please explain why you should "never loop" (I wouldn't call it looping
myself) through the ISA server. This is a web publishing scenario.
http://myserver/whatever should return the same content no matter where this
URL is entered. My Split DNS returns the ISA's internal addresses when
queried from inside and the ISA's external ip addresses when queried from
outside. Internal clients should not make requests against the external
interface of the ISA server and they don't. They make requests against the
internal interface.
Now once again: If I have an SSL web listener configured to listen on both
the internal and external interfaces and I make an SSL request against the
internal interface the attempt is timing out. Non SSL requests made against a
non-ssl listener are working just fine. Is there anyone who actually knows
why this might be happening?
Thanks
Bill
-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxx]
Sent: Friday, January 14, 2005 3:28 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SSL Listenter Issue
http://www.ISAserver.org
Split dns means that the same url is used for inside and out. You should
never loop through Isa for internal access.
Steve
-----Original Message-----
From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx]
Sent: Friday, January 14, 2005 3:20 PM
To: ISA Mailing List
Subject: [isalist] RE: SSL Listenter Issue
http://www.ISAserver.org
I have to disagree with you on this. I have my ISA server setup to publish
multiple back-end web servers using paths. I want a consistent URL space.
Not one URL space for outside and another for inside. If possible could
someone answer my actual question.
Thanks
-----Original Message-----
From: Gabriel O. Zabal [mailto:gabriel@xxxxxxxxxx]
Sent: Friday, January 14, 2005 12:39 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SSL Listenter Issue
http://www.ISAserver.org
If you have split DNS why point to the internal IP of ISA ??
It should point to the Internal IP of the Web Server instead, Unless ISA is
also your Web Server.
Which is your scenario?
Gabriel
-----Mensaje original-----
De: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] Enviado el: Viernes,
14 de Enero de 2005 04:14 p.m.
Para: [ISAserver.org Discussion List]
Asunto: [isalist] SSL Listenter Issue
http://www.ISAserver.org
Hello,
I have an SSL listenter problem. I have configured the listener for both the
internal and external interfaces. It works fine when external clients
connect, but not when internal clients connect. In the second case it simply
times out. I have split DNS to point internal clients to the internal
interface on the ISA server.
Thanks
Bill
William Holmes (MCP)
Department of Computer Science
310 Upson Hall
Cornell University
Ithaca, NY 14853
wtholmes@xxxxxxxxxxxxxx
607 255-1757 (o) 607 227-6049 (c)
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading Network
Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gabriel@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading Network
Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wtholmes@xxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading Network
Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
This E-Mail is confidential. It is not intended to be read, copied, disclosed
or used by any person other than the recipient named above.
Unauthorised use, disclosure, or copying is strictly prohibited and may be
unlawful. Optimum IT Solutions Ltd disclaims any liability for any action
taken in connection of this E-Mail. The comments or statements expressed in
this E-Mail are not necessarily those of Optimum IT Solutions Ltd or its
subsidiaries or affiliates.
administrator@xxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading Network
Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wtholmes@xxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
