Welcome to ISAserver.org

Problem with upstream Proxy server

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> General >> Problem with upstream Proxy server

Page: [1]

Message

<< Older Topic Newer Topic >>

Problem with upstream Proxy server - 18.Nov.2006 11:20:37 AM

FrancWest

Posts: 70
Joined: 22.Jul.2004
Status: offline

Hi,

I've a problem when using an upstream proxy server. I've created a web chaining rule so that all traffic is routed to our upstream proxy server (Astaro ASL V6). For web proxy clients this works fine, however, for secureNAT clients it doesn't. For some reason, the HTTP Host headers aren't sent. Thus websites are reporting that we aren't allowed to acces that site (and it reports the ip-address). Or we see the page of the provider hosting the site and not the site itself.

Any idea what might cause this ?

Franc.

Post #: 1

Featured Links*

RE: Problem with upstream Proxy server - 20.Nov.2006 10:27:42 AM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Franc,

How could a SecureNAT client send a host header? They resolve the names themselves and send the request to the destination IP address. Doesn't the simple Astaro device so reverse lookups?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to FrancWest)

Post #: 2

RE: Problem with upstream Proxy server - 20.Nov.2006 10:52:51 AM

FrancWest

Posts: 70
Joined: 22.Jul.2004
Status: offline

Hi Tom,

sure it can. But how about multiple web sites on a single IP address ? It looks like it's doing exactly that, on some sites I end up on the website of the hosting provider instead of the website itself.

Franc.

(in reply to tshinder)

Post #: 3

RE: Problem with upstream Proxy server - 4.Dec.2006 10:53:56 AM

tshinder

Posts: 47408
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Franc,

That's how the Web proxy client configuration solves the problem.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to FrancWest)

Post #: 4

RE: Problem with upstream Proxy server - 4.Dec.2006 12:25:13 PM

FrancWest

Posts: 70
Joined: 22.Jul.2004
Status: offline

Hi Tom,

but how do you explain then why it's working fine as soon as I disbale wheb chaning but when I enable it is goes wrong. Am I missing some configuration I have to do. When doing a network trace when webchaining is enabled, you can see that ISA inserts the IP address of the destionation in the GET request. It doesn't do this when webchaning is not configured.

Franc.

(in reply to FrancWest)

Post #: 5

RE: Problem with upstream Proxy server - 5.Dec.2006 12:42:41 PM