• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Problem with wesite publication

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Publishing] >> Web Publishing >> Problem with wesite publication Page: [1]
Login
Message << Older Topic   Newer Topic >>
Problem with wesite publication - 21.Jan.2007 8:12:39 AM   
Domel

 

Posts: 7
Joined: 21.Jan.2007
Status: offline
Hello,

Website is running on IIS on same machine as ISA2006 about which I'am talking. There is created WebServer publication rule on the top of policies which allows traffic for selected domain (different than IIS and Server main domain) in port 80.
Problem that I clearly see in logs that traffic is blocked by default rule ...
It looks like that:
http://domelstudio.home.pl/isa/fw_policy.gif
(I'm not pasting image because it is very wide)

Publication rule looks like that:






I'm thrying to find problem but everything seems to be ok.
Website works only when I will allow all fraffic from outside ...

_____________________________

In skating over thin ice, our safety is in our speed.
Post #: 1
RE: Problem with wesite publication - 24.Jan.2007 2:07:13 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Do NOT run Web servers on firewalls. They compromise security and stability of the firewall. This is the kind of thing that MS security gets blamed when it's the user who actually breaks security.

Once you get the Web site off the firewall, we can figure out what the problem is.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to Domel)
Post #: 2
RE: Problem with wesite publication - 25.Jan.2007 5:01:19 PM   
Domel

 

Posts: 7
Joined: 21.Jan.2007
Status: offline
quote:

ORIGINAL: tshinder

Do NOT run Web servers on firewalls. They compromise security and stability of the firewall. This is the kind of thing that MS security gets blamed when it's the user who actually breaks security.

Once you get the Web site off the firewall, we can figure out what the problem is.

HTH,
Tom

Ok but what with SBS IIS? ISA is on same mashine as domain controller so there is also IIS and websites ...
I have added to IIS second websie which I;m trying to publish ...

I will add that this is test enviroment separated to corporate.

(in reply to tshinder)
Post #: 3
RE: Problem with wesite publication - 26.Jan.2007 12:12:53 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Domel,

SBS is unsecure by design. As a very very smart guy said to me:

"I would rather sandpaper a bobcat's ass in a phone booth than flay my network with that product"



Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to Domel)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Publishing] >> Web Publishing >> Problem with wesite publication Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts