What do you find in the ISA logs for those requests? What does netstat-an(o for w2k3) display? ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] Sent: Friday, January 14, 2005 16:50 To: [ISAserver.org Discussion List] Subject: [isalist] RE: SSL Listenter Issue http://www.ISAserver.org Hello, So what is the point of web publishing then? I have several different web servers that I publish using ISA. Paths are used to direct the request to the appropriate internal web server. ISA Server allows all thease servers to be made available through a single name space. This is very important to me and it works just fine except for SSL connections. Please explain why you should "never loop" (I wouldn't call it looping myself) through the ISA server. This is a web publishing scenario. http://myserver/whatever should return the same content no matter where this URL is entered. My Split DNS returns the ISA's internal addresses when queried from inside and the ISA's external ip addresses when queried from outside. Internal clients should not make requests against the external interface of the ISA server and they don't. They make requests against the internal interface. Now once again: If I have an SSL web listener configured to listen on both the internal and external interfaces and I make an SSL request against the internal interface the attempt is timing out. Non SSL requests made against a non-ssl listener are working just fine. Is there anyone who actually knows why this might be happening? Thanks Bill -----Original Message----- From: Steve Moffat [mailto:steve@xxxxxxxxxx] Sent: Friday, January 14, 2005 3:28 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: SSL Listenter Issue http://www.ISAserver.org Split dns means that the same url is used for inside and out. You should never loop through Isa for internal access. Steve -----Original Message----- From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] Sent: Friday, January 14, 2005 3:20 PM To: ISA Mailing List Subject: [isalist] RE: SSL Listenter Issue http://www.ISAserver.org I have to disagree with you on this. I have my ISA server setup to publish multiple back-end web servers using paths. I want a consistent URL space. Not one URL space for outside and another for inside. If possible could someone answer my actual question. Thanks -----Original Message----- From: Gabriel O. Zabal [mailto:gabriel@xxxxxxxxxx] Sent: Friday, January 14, 2005 12:39 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: SSL Listenter Issue http://www.ISAserver.org If you have split DNS why point to the internal IP of ISA ?? It should point to the Internal IP of the Web Server instead, Unless ISA is also your Web Server. Which is your scenario? Gabriel -----Mensaje original----- De: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] Enviado el: Viernes, 14 de Enero de 2005 04:14 p.m. Para: [ISAserver.org Discussion List] Asunto: [isalist] SSL Listenter Issue http://www.ISAserver.org Hello, I have an SSL listenter problem. I have configured the listener for both the internal and external interfaces. It works fine when external clients connect, but not when internal clients connect. In the second case it simply times out. I have split DNS to point internal clients to the internal interface on the ISA server. Thanks Bill William Holmes (MCP) Department of Computer Science 310 Upson Hall Cornell University Ithaca, NY 14853 wtholmes@xxxxxxxxxxxxxx 607 255-1757 (o) 607 227-6049 (c) ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gabriel@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: wtholmes@xxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isalist@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx This E-Mail is confidential. It is not intended to be read, copied, disclosed or used by any person other than the recipient named above. Unauthorised use, disclosure, or copying is strictly prohibited and may be unlawful. Optimum IT Solutions Ltd disclaims any liability for any action taken in connection of this E-Mail. The comments or statements expressed in this E-Mail are not necessarily those of Optimum IT Solutions Ltd or its subsidiaries or affiliates. administrator@xxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: wtholmes@xxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.