RE: can not publish servers other than port 80

  • From: "Gregory Crockett" <Gregory.Crockett@xxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 17 Jan 2003 11:21:43 -0600

Tom,

I forgot to say it works fine after I made the server also SecureNAT for this 
ISA -- it is now SecureNAT for two different ISA servers.  The MSKB and your 
message below helped.

Thanx again

greg
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Friday, January 17, 2003 10:25 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: can not publish servers other than port 80


http://www.ISAserver.org


Hi Gregory -

You need to make the server a SecureNAT client. The source address is
preserved when the packet is passed, so it needs the SecureNAT client
config to route the packet back to the Internet host that made the
request. You can check out MSKB 311777 if you can't change the gateway
config on the published server.

HTH,
Tom
www.isaserver.org/shinder


-----Original Message-----
From: Gregory Crockett [mailto:Gregory.Crockett@xxxxxxxxx] 
Sent: Thursday, January 16, 2003 4:44 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] can not publish servers other than port 80


http://www.ISAserver.org


Hello all:

I can only pub port 80 using web pub rules.  I can not pub anything
using server pub rules.  I can pub ftp with a bridging redirect using
web pub rules.  Netstat -na on internal machine show syn_ sent ;
time_wait ; fin_wait_2 from the Internet system requesting access.  If I
telnet to port 25 using cmd telent, it just sits.  Looks like ISA is
passing the  request to the internal machine, but the internal machine
does not know how to return.  Both machines are mulihomed (multiple ip
addresses/networks on a single nic).

The isa is 192.168.113.249 / 110.249 / 112.249
the smtp/ftp server is 192.168.113.244 / 110.244 / 112.244 -- smtp and
ftp use only 113.244.  The pub rules point to 113.244.  However, netstat
-na shows isa using 110.249 to send to 113.244.

TIA

have fun!

greg





------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
isaserver@xxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: