I thought I'd be able to get around Web Publishing by setting up a custom Protocol Definition as:

Name: HTTP Server
Description: Hyper Text Transfer Protocol - Server
Port number: 80
Protocol type: TCP
Direction: Inbound

And then creating a Server Publishing Rule as:

Name: HTTP Inbound
Internal address: xxx.xxx.xxx.xxx
External address: xxx.xxx.xxx.xxx
Mapped server protocol: HTTP Server
Applies to: Any request

However, I cannot connect to my web site from outside of the firewall using the external IP address. It seems to time out and I get the message 'Cannot find server or DNS error'.

Packet filtering is turned off. I have no Incoming Listeners. I have no Web Publishing rules already set up.

I am able to get everything working okay by using Web Publishing rules, but I cannot use this in production.

What could be going on? Am I doing something wrong?

Many thanks!

A few things I can think of here:

1. Make sure IIS is removed from the ISA Server

2. Run netstat to determine if port 80 is open

3. Change the port on the Inbound Web Requests Listner to something like 9999

4. Restart the Firewall Service

5. Disable and re-enable the Publishing Rule

6. Restart the computer.

HTH,
Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get It Here

I've checked the following:

1. IIS is removed from the ISA Server.

2. Netstat reports:
TCP <external_isa_ip_address>:80 0.0.0.0:0 LISTENING

3. Inbound Web Requests Listner is set to 9999 and is not listening on any IP address.

I have tried all of restarting the Firewall Service, disabling and re-enabling the Publishing Rule and restarting the computer.

Unfortunately, it still doesn't seem to work! I have looked in the Firewall log and this is the only line I get when a client tries to access my site:

c-ip <internal_website_ip_address>
cs-username -
c-agent -
date 31/05/2001
time 07:11:47
s-computername <isa_server_name>
r-host -
r-ip <client_ip_address>
r-port 1133
time-taken 22968
cs-bytes -
sc-bytes -
cs-protocol 80
cs-transport TCP
s-operation Accept
sc-status 10060
sessionid 2
connectionid 10

I'm pulling my hair out! Is there any more information I can provide that might help identify my problem?

I do see a problem here, although I'm not quite sure why its the case. Notice the entry 0.0.0.0:80 indicates that Port 80 is listening on *all* interfaces. This indicates to me that IIS WWW service is running. However, that doesn't make sense since you've uninstalled IIS.

Try disabling or changing the port used by the internal interface to advertising configuration information for wpad queries.

If that doesn't work, it might be time to wipe the box.

HTH,
Tom

------------------
Tom Shinder
http://www.isaserver.org/shinder/

Get It Here

All okay! Phew - I thought I was missing some understanding there for a minute but obviously I wasn't.

Thanks for your pointers!