Problem with upstream Proxy server (Full Version)

All Forums >> [ISA 2006 Firewall] >> General



Message


FrancWest -> Problem with upstream Proxy server (18.Nov.2006 11:20:37 AM)

Hi,

I've a problem when using an upstream proxy server. I've created a web chaining rule so that all traffic is routed to our upstream proxy server (Astaro ASL V6). For web proxy clients this works fine, however, for secureNAT clients it doesn't. For some reason, the HTTP Host headers aren't sent. Thus websites are reporting that we aren't allowed to acces that site (and it reports the ip-address). Or we see the page of the provider hosting the site and not the site itself.

Any idea what might cause this ?

Franc.




tshinder -> RE: Problem with upstream Proxy server (20.Nov.2006 10:27:42 AM)

Hi Franc,

How could a SecureNAT client send a host header? They resolve the names themselves and send the request to the destination IP address. Doesn't the simple Astaro device so reverse lookups?

Tom




FrancWest -> RE: Problem with upstream Proxy server (20.Nov.2006 10:52:51 AM)

Hi Tom,

sure it can. But how about multiple web sites on a single IP address ? It looks like it's doing exactly that, on some sites I end up on the website of the hosting provider instead of the website itself.

Franc.




tshinder -> RE: Problem with upstream Proxy server (4.Dec.2006 10:53:56 AM)

Hi Franc,

That's how the Web proxy client configuration solves the problem.

Tom




FrancWest -> RE: Problem with upstream Proxy server (4.Dec.2006 12:25:13 PM)

Hi Tom,

but how do you explain then why it's working fine as soon as I disbale wheb chaning but when I enable it is goes wrong. Am I missing some configuration I have to do. When doing a network trace when webchaining is enabled, you can see that ISA inserts the IP address of the destionation in the GET request. It doesn't do this when webchaning is not configured.

Franc.




FrancWest -> RE: Problem with upstream Proxy server (5.Dec.2006 12:42:41 PM)

Hi Tom,

FYI: the problem I'm experiencing in this thread is a bug in ISA 2006 and was just confirmed to me by Microsoft.

Franc.




rutger_vossebeld -> RE: Problem with upstream Proxy server (15.May2007 11:04:55 AM)

Hi Franc, 

I'm experiencing the same problem as you. Did Microsoft help with a patch or another solution?

Rutger




Page: [1]