RE: Trihomed DMZ

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 3 Feb 2003 19:45:40 -0600

Hi Mark,

If you can publish the DMZ host via a Server Publishing Rule, then you
have a problem, as you can only publish LAT hosts. Double check your LAT
and make sure the DMZ addresses are not in there. 

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp 


-----Original Message-----
From: Mark Wrightson [mailto:mark.wrightson@xxxxxxxxxxxxxxxx] 
Sent: Monday, February 03, 2003 9:15 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Trihomed DMZ


http://www.ISAserver.org


Have setup a Trihomed DMZ as per Tom Shinders book (ISA Server and
Beyond)

Public addresses on DMZ interface (Have treble checked all the ip
address
/ mask / gateway settings on all interfaces as per book)

Am trying make a web sever available on the DMZ as per instructions.
I.E.
Am creating a filter to allow access both ways to port 80 on the server
from and request. Have enabled IP routing within ISA. It doesn't work.

Can publish the server via publishing rule but not via filter. Can setup
filters which work to the ISA server itself but not to the DMZ.

Nothing seems to be being routed to the DMZ. Can ping server on DMZ from
the ISA Servers or clients on the private network.

Do I need to do anthing in RRAS (NAT / Routes ?)

Anybody have ant ideas ?

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: