Welcome to ISAserver.org

SecureNat will not work

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> SecureNAT Client >> SecureNat will not work

Page: [1]

Message

<< Older Topic Newer Topic >>

SecureNat will not work - 11.Jun.2001 4:38:00 PM

ace

Posts: 25
Joined: 1.Jun.2001
From: Allentown, PA, USA
Status: offline

I cannot seem to get any SecureNAT client to work. I am trying to allow DNS Query & Zone Transfer but ISA just won't let anything through. I even tried to open everything, but nothing worked. What can I try? People are browsing via the web client option, but I can't get SecureNAT to work. nslookup just times out. Gateway of maching I am trying to poke a hole for is pointing to internal of ISA. Protocol rules to allow the 2 DNS (TCP & UDP) - TCP because I want Exchange to be able to lookup. Where do I go from here?

------------------

Ace

Post #: 1

Featured Links*

RE: SecureNat will not work - 12.Jun.2001 1:18:00 AM

smarisetty

Posts: 36
Joined: 11.Jun.2001
From: Santa Clara, CA, USA
Status: offline

Hi,

Make sure that your secureNAT client is properly configured to point to the gateway an DNS.

Gateway is the internal ip address of the ISA server and DNS could be the internal IP address of your internal DNS server.

You can automatically configure the TCP settings of the secureNAT client through your DHCP.

Also make sure that your local DNS server has the DNS forwarding set with the IP addresses of the DNS servers at your ISP or on the internet.

(in reply to ace)

Post #: 2

RE: SecureNat will not work - 28.Jun.2001 11:42:00 PM

BoaterDan

Posts: 5
Joined: 28.Jun.2001
From: Livonia, MI
Status: offline

Ditto here (and it looks like others).

Web proxy works fine. Who's doing the dns lookups for them???

Gateway of internal dns server is set to internal isa ip. Forwarder on dns server is set to isp's dns ip address.

I know the dns forwarding works because when I change it to another dialup router here nslookup works just fine. Switch back to the isa server and nada.

Are there people here that actually have this working???

(in reply to ace)

Post #: 3