Welcome to ISAserver.org

Publishing the Proxy Server

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Server Publishing >> Publishing the Proxy Server

Page: [1]

Message

<< Older Topic Newer Topic >>

Publishing the Proxy Server - 24.Mar.2004 10:38:00 AM

Guest

I have problems with publishing the internal proxy server to external clients. There is no port to external clients open on the isaserver.
I published the port 8080, with a userdefined protocoll (tcp/inbound) and forward this request to the internal address of the isaserver. What is wrong?

Greets
Michael

Post #: 1

Featured Links*

RE: Publishing the Proxy Server - 25.Mar.2004 2:59:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Micheal,

Not sure what the problem is, but I think the more important issue is why would you want to publish the proxy when the ISA firewall can be your Web Proxy?

Thanks!
Tom

(in reply to Guest)

Post #: 2

RE: Publishing the Proxy Server - 25.Mar.2004 8:42:00 AM

Guest

Hi Tom,

thanks for your reply.

I would like to do the same, how it was described in this article for ISA 2000 and what worked for me with ISA 2000:
http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=9;t=000279

For internal clients everything is ok and running.

I created a server publishing role on the ISA with an inbound port 8080 on the external interface (only one IP), which directs to the internal interface of the ISA (only one IP)(as I said before, this works on ISA2000). But now, I don't see an open external port 8080 with netstat and the "redirecting" don't work. What is wrong? Is there another way to do this job (except via VPN)?

Greets
Michael

(in reply to Guest)

Post #: 3

RE: Publishing the Proxy Server - 26.Mar.2004 1:58:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Michael,

I don't have an ISA firewall in front of me at the moment, but there should be a Web Proxy configuration tab in the Properties of the External network?

Thanks!
Tom

(in reply to Guest)

Post #: 4

RE: Publishing the Proxy Server - 26.Mar.2004 5:12:00 PM

Guest

Hi Tom,

there is no Web Proxy Tab on the external network.
I created an "External Network Card" (with external IP of my NIC). There is a Web Proxy Tab, where I allow Web Proxy access. I saw an open port 8080 on the external NIC with netstat, but external clients don't have access (no messages in any protocol). I tried different other things, but I didn't see any open port on the external IP?!?

Is it normal, that there is no external network card in the network overview? Maybe this is the problem? Should I install the server again or is there an "easy" possibility to "reset" the complete configuration of the ISA?

Thanks and have a nice weekend.

Michael

(in reply to Guest)

Post #: 5

RE: Publishing the Proxy Server - 27.Mar.2004 6:26:00 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Michael,

OK, I just checked myself and you're right, there is no Web Proxy tab on the External interface. I check to see if you can use a Server Publishing Rule to publish the Web listener on the internal interface.

Make sure you crate the proper access rules that allow External hosts to External. That might be the problem right there, in that External hosts should directly access resources; doesn't make much sense for them to go through a proxy, unless you are running some sort of anonymizer, which is a whole 'nother story.

HTH,
Tom

(in reply to Guest)

Post #: 6

RE: Publishing the Proxy Server - 31.Mar.2004 8:38:00 AM

Guest

Hello Tom,

sorry, that my new posting needs a few days [Wink]

.

I have no success! There is no chance to open any(!) port to external clients. I can't publish any server on the internal network. Therefore I guess, that something is wrong with my installation. Do you have an idea, where to look for?

Background:
The ISA-Server is used in an intranet environment. So we need (internal, private testing network to external "official" network) access to Windows-Shares, Exchange-Servers, Upstream-Proxys and so on. Some colleagues would need access to the external network interface of our ISA-Server to use the proxy, because they use not registered IP-Adresses to the Upstream-Proxys (so, some kind of anonymizer [Razz]

). I will realize this function via VPN. This works.

Thanks for your replys.

Greetings
Michael

(in reply to Guest)

Post #: 7

RE: Publishing the Proxy Server - 31.Mar.2004 10:59:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Michael,

I tried to publish the Web listener on the Internal interface, but it did not work. Not sure why it didn't work, because it should have. I think the problem was the access rule. What should the source and destination network be? I thought it would be External to External, but that doesn't make sense, like Internal to Internal doesn't make sense.

The other features you mention should be a lot easier, as you can publish or create access rules to allow that traffic through the ISA box, rather than trying to publish or make available a service on the ISA box itself.

HTH,
Tom

(in reply to Guest)

Post #: 8