Re: Web publishing Fails
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 7 Jan 2004 16:18:39 -0800
ISA should resolve that FQDN to the internal IP unless you want chain loops,
14120 errors and random weirdness.
You state that you have socket pooling disabled on the ISA; what IIS components
did you install?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 07, 2004 14:28
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
Hi, when I ping www.myfaircd.com from the ISA server I get good replies to
24.207.24.121 this is correct dns resolving as far as I can see. I see the
"GET" is using the FQDN for redirect, this is the best approach for web
publishing ... I thought... on this ISA I have socketpooling disabled for
running GFI mailsecurity would this have anything to do with failed web
publishing?
Thanks
Peter
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, January 07, 2004 1:37 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
Here's the log data I needed:
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:49:08
K2 - www.myfaircd.com 24.27.24.121 80 20960 453
- http GET http://www.myfaircd.com/ Inet 10060
Notice that the "GET" references the public FQDN; this indicates that the
web publsihing rule is actually trying to use the FQDN to
redirect.
If you "ping www.myfaircd.com" from the ISA itself, what do you see?
Also, it's clear from this log entry that you're testing publishing rules
from behind ISA; this is very error prone and not
supported.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 07, 2004 10:14
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
Hi Jim, the redirect value in the web publishing rule is 192.168.200.3 port
80 The ip that is listening is 24.207.24.121 and the FQDN is
www.myfaircd.com it publishes the web site at 192.168.200.3
Here is a more complete view of the web log: A copy to excel will columnize
the data correctly, thanks again. Peter
#Fields: c-ip cs-username c-agent date time s-computername
cs-referred r-host r-ip r-port time-taken cs-bytes
sc-bytes cs-protocol s-operation cs-uri s-object-source
sc-status
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:37
K2 - www.microsoft.com 207.46.249.252 80 100 409
456 http GET
http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome Inet
302
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:37
K2 - home.microsoft.com 207.68.172.246 80 90 371
288 http GET http://home.microsoft.com/ Inet 302
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:37
K2 - www.msn.com 207.68.173.254 80 220 427
28891 http GET http://www.msn.com/ Inet 200
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:48:39
K2 - c.msn.com 207.68.177.126 80 70 530 442
http GET
http://c.msn.com/c.gif?na=1154&nc=10009&ps=10274&di=340&pi=7317&TP=http%3a%2
f%2fwww.msn.com%2f Inet 200
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:49:08
K2 - www.myfaircd.com 24.27.24.121 80 20960 453
- http GET http://www.myfaircd.com/ Inet 10060
24.207.24.8 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:53:32
K2 - www.sundevtech.com 192.168.200.30 80 3675 381
4255 http GET http://192.168.200.30/ Inet 200
192.168.200.101 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows
NT 5.1; .NET CLR 1.0.3705; .NET CLR 1.1.4322) 2004-01-07 17:53:32
K2 - www.sundevtech.com 24.207.24.8 80 3726 457
4244 http GET http://www.sundevtech.com/ Inet 200
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, January 07, 2004 9:42 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
Is that all you're logging?
There's nothing of value in that log entry.
What is your redirect value in the web publishing rule?
What is the rest of the log entry?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 07, 2004 09:09
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
Hi Jim thanks for taking a look at my web publishing problem.
I have looked into my webext logs and found that the 10060 error is related
to: (as per log data)
r-port time-taken cs-bytes sc-bytes cs-protocol
sc-status
80 20990 310 - http
10060
Could this be better configured if I changed the incoming listening port on
the second external ip to something other than 80?
Thanks,
Peter
****************************************************
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, January 07, 2004 6:45 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Web publishing Fails
http://www.ISAserver.org
That error is a Windsock response saying "that host didn't respond on that
protocol/port combination.
Take a look in the ISA WEBEXT log to see what actually happened.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/Jim_Harrison
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Peter Forster" <peter.forster@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, January 06, 2004 20:44
Subject: [isalist] Web publishing Fails
http://www.ISAserver.org
Hello, I am stumped. I have my ISA running on a Windows 2003 server, 2 nics,
one internal ip and one external. On the external I have leased 2 static
ips, both FQDNs. I have in my private LAN one (Win2003)DC with Exchange
2003, call this server1. I have a second web server with IIS 6 server 2000
call this server2. I have created destination sets and web publishing rules
to have everything working on server1 based on one of the static ips and a
FQDN. For the second static ip I have set up an individual listener for that
ip both listen for incoming on port 80. I have created a destination set
with a FQDN that uses the path /* and in the web publishing rule it is
redirected to 192.168.200.3 port 80. All fairly basic but I get a msg saying
the page cannot be displayed plus:
10060 - Connection timeout
Internet Security and Acceleration Server
Any help would be appreciated,
Thanks,
Peter
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter.forster@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter.forster@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter.forster@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
