Welcome to ISAserver.org

Some sites accessible from ISA server

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Some sites accessible from ISA server

Page: [1]

Message

<< Older Topic Newer Topic >>

Some sites accessible from ISA server - 11.May2006 12:42:51 PM

bctgroup

Posts: 34
Joined: 29.Nov.2005
From: Paul Welsh
Status: offline

Here's an odd one.

If I logon to my ISA 2004 server and fire up IE, I can browse to some sites, eg, www.google.co.uk. However, from the Google page I notice that the Groups link points to http://groups.64.233.183.104/grphp?hl=en&tab=wg rather than http://groups.google.co.uk/grphp?hl=en&tab=wg and when I try to click on the link it fails with "Cannot find server or DNS Error".

Some sites such as www.oracle.com I can't resolve at all.

I would have expected IE on the ISA server not to be able to connect to any sites until I configured IE to use the ISA server as a proxy.

I get the same thing when I VPN in from an external address. If I look at the logs, I see from the URL column that all URL requests from the VPN client are shown by IP address not name. As soon as I configure the VPN connection on the client machine to use the ISA server as the proxy, I see names not IPs in the log.

The fact that names are being resolved to IPs means that DNS is working. I have 2 internal DNS servers which forward to the ISA server. The DNS on the ISA server is a caching DNS. It uses our ISP's DNS servers.

Post #: 1

Featured Links*

RE: Some sites accessible from ISA server - 12.May2006 3:57:54 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi BCT,

Have you installed the latest ISA firewall hotfix?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to bctgroup)

Post #: 2

RE: Some sites accessible from ISA server - 12.May2006 4:35:42 PM

bctgroup

Posts: 34
Joined: 29.Nov.2005
From: Paul Welsh
Status: offline

Hi

I have SP2 but no hotfixes.

Cheers

Paul

(in reply to tshinder)

Post #: 3

RE: Some sites accessible from ISA server - 12.May2006 5:36:53 PM

Jason Jones

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

http://support.microsoft.com/kb/916106/en-us

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to bctgroup)

Post #: 4

RE: Some sites accessible from ISA server - 14.May2006 5:40:58 PM