RE: VPN Taking over DNS Query ?

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 22 Jul 2003 19:26:05 -0500

Hi Steve,
 
So, you have a PPTP client behind the ISA Server firewall and browsing
is slow while connected to the remote network? Try configuring the
browser as a Web Proxy client and all will be well. Unless you're
running Lynx, I'm sure your browser supports the config.
 
HTH,
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 

        -----Original Message-----
        From: Craft, Steve [mailto:SCraft@xxxxxxxxxxxxxxxxxxx] 
        Sent: Tuesday, July 22, 2003 9:12 AM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] VPN Taking over DNS Query ?
        
        
        http://www.ISAserver.org
        
        
        

        ISA On Win2K/SP4, firewall/SNAT client running Win2K/SP4 behind
it.  Client can browse the web, do FTP, whatever.  Web proxy client
stuff is off, IE uses the firewall client to browse the web.  DNS is
running on the ISA box as a forwarder only, all LAN systems use the ISA
for DNS.

        I enabled (Microsoft) VPN on the client to connect to a
Microsoft VPN server out on the internet.  As soon as it activates,
browsing and etc is slow on the client and the ISA server cannot browse
the web.  ISA server Event Log also shows this:

        " 
        Server publishing rule [DNS Query Server] that maps 10.10.2.1:53
UDP to 129.42.16.99:53 for protocol [DNS Query Server] failed because
the port on the external interface is being used by another application.
The Firewall service failed to bind socket for the server on the
firewall since another process is using the same port. Check for any
other process using the same port and terminate if necessary. 

        " 

        " 
        Server publishing rule [DNS Zone Transfer] that maps
10.10.2.1:53 TCP to 129.42.16.99:53 for protocol [DNS Zone Transfer
Server] failed because the port on the external interface is being used
by another application.  The Firewall service failed to bind socket for
the server on the firewall since another process is using the same port.
Check for any other process using the same port and terminate if
necessary. 

        " 



        1.  How do I get my VPN client to play nice and not take over
the ISA?. 

        2.  How can an internal client take over the firewall service,
when it had a lock on that port initially? 



        Thanks. 

        NOTICE:  This communication, including attachments, is
information that is confidential and may be privileged.  It constitutes
non public information intended to be conveyed only to the designated
recipient(s).  If the reader or recipient of this communication is not
the intended recipient, an employee or agent of the intended recipient
who is responsible for delivering it to the intended recipient, or if
you believe that you have received this communication in error, please
notify the sender immediately by return email and promptly erase this
email including attachments without reading or saving them in any
manner.  The unauthorized use, dissemination, distribution or
reproduction of this email, including attachments, is prohibited and may
be unlawful.  Receipt by anyone other than the intended recipient(s) is
not a waiver of confidentiality or privilege by the sender.

        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
        To unsubscribe send a blank email to
$subst('Email.Unsub') 

Other related posts: