RE: Setting up reverse proxy (how to?)
- From: "Marty Nelson" <MNelson@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 5 Dec 2005 08:28:50 -0800
I'm back, thought you lost me didn't you!
When I received yours and Danny's message, I went into my server room
and added a second card to the machine. When I rebooted, my RAID array
lost a disk and somehow decided to corrupt my Windows installation. I'm
back up and running now though, and let me tell you where I am. The
server has two interfaces, 10.100.2.15 (in the DMZ), and a 192.168
address which is in our internal network.
I've reinstalled ISA, and am currently running in "Edge Firewall" mode.
Since I am running this in our DMZ, behind out OpenBSD firewall, is that
the appropriate setup? As far as the publishing of my internal web
server goes, I've setup the following rule:
From: Anywhere
To: 192.168.0.9
Traffic: HTTP
Listener: Port 80 listener
Networks: External, Internal, Local Host
Preferences: Enable Port 80
Public Name: Request for the following websites
ipcs.transdyn.com/jira
And that's it, or rather those are the only fields I've changed. I know
I'm missing something, I just don't know where, or what. I am running
IIS on the same machine, and there is a website: ipcs.transdyn.com, but
there is no jira virtual directory. Do I need to create one? Any help
would be greatly appreciated.
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Wednesday, November 30, 2005 4:33 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Setting up reverse proxy (how to?)
http://www.ISAserver.org
Hi Marty,
No, it just means that Web proxy scut duty is all the ISA firewall will
be able to do. Sort of like three tires off your Corvette because "it
goes too fast"
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**
> -----Original Message-----
> From: Marty Nelson [mailto:MNelson@xxxxxxxxxxxx]
> Sent: Wednesday, November 30, 2005 4:24 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Setting up reverse proxy (how to?)
>
> http://www.ISAserver.org
>
> That cracked me up.
>
> Am I to take that to mean that I cannot do what I'm looking to do
> without adding a second card?
>
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> Sent: Wednesday, November 30, 2005 2:16 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Setting up reverse proxy (how to?)
>
> http://www.ISAserver.org
>
> Unihomed ISA firewalls are the devils playground. They are
> the deciever,
> the dissembler, the almost undead.
>
> I never get near them for fear of becoming unclean.
>
> HTH,
> Tom
>
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://spaces.msn.com/members/drisa/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> **Who is John Galt?**
>
>
>
> > -----Original Message-----
> > From: Marty Nelson [mailto:MNelson@xxxxxxxxxxxx]
> > Sent: Wednesday, November 30, 2005 3:50 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Setting up reverse proxy (how to?)
> >
> > http://www.ISAserver.org
> >
> > Also, I've setup my ISA server as a server with a single NIC,
> > following
> > http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/sin
> > gle_adapte
> > r.mspx I take it that shouldn't have any effect on what I'm
> trying to
> > do? I never thought setting up a reverse proxy would be so
> difficult!
> >
> > Thanks again for your help,
> >
> > Marty
> >
> > -----Original Message-----
> > From: Marty Nelson [mailto:MNelson@xxxxxxxxxxxx]
> > Sent: Wednesday, November 30, 2005 11:15 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Setting up reverse proxy (how to?)
> >
> > http://www.ISAserver.org
> >
> > I apologize for not including that in my last post. All I
> see in the
> > logs are the traffic going to port 80 being denied. I create a new
> > access rule, and then the traffic passes, then it dies. I
> > get a "Cannot
> > find server" error message, and the log shows "Initiated
> > Connection...Closed Connection". It just doesn't seem to be
> > passing the
> > traffic to the internal web server.
> >
> > -----Original Message-----
> > From: Danny [mailto:nocmonkey@xxxxxxxxx]
> > Sent: Wednesday, November 30, 2005 10:35 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Setting up reverse proxy (how to?)
> >
> > http://www.ISAserver.org
> >
> > On 11/30/05, Marty Nelson <MNelson@xxxxxxxxxxxx> wrote:
> > [...]
> > > That being said, I'm not sure what I'm doing wrong. I'm following
> > >
> > http://www.microsoft.com/technet/prodtechnol/isa/2004/plan/pub
> > lishingweb
> > > and I must be missing something. I've setup a new web publishing
> > rule, and
> > > changed the fields that they say to change after the rule
> is setup.
> > They
> > > make it seem like that's all you have to do. I'm clearly missing
> > something,
> > > or misconfiguring something I just don't know what it is.
> > Do you know
> > of
> > > another walkthrough, explaining how to publish an internal
> > web server
> > on an
> > > ISA '04 machine?
> >
> > Did you test? If so, what error messages are you encountering?
> >
> > ...D
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > mnelson@xxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org
> Discussion List as:
> > mnelson@xxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: tshinder@xxxxxxxxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> mnelson@xxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mnelson@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
