• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Web publishing - From External

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Publishing] >> Web Publishing >> Web publishing - From External Page: [1]
Login
Message << Older Topic   Newer Topic >>
Web publishing - From External - 17.Oct.2007 10:23:38 AM   
moreauer

 

Posts: 18
Joined: 13.Jun.2007
Status: offline
Hi everyone,

I need to publish a "restricted" Web site but I need only a specific range of IP address from "External" network.  Is this possible ???

I have a graphic to show exactly what I want to do but I'm not able to paste it or insert it in this post...  So I'll try to be clear...

My web site is in my "Electronic service delivry" environnement.  My users wants to test the site from their computer simulating an access from the Internet but they don't want the Internet to have an access. And my ISA is in my DMZ.  My users connect directly to the Internet thrue a Firewall.  The Firewall car redirect my users to my DMZ with a PAT IP address. (it's more clear in my graphic)

So here's my web publishing rule that works for all (from my users and from Internet)

From: External,
To: ESDWebsite X.X.3.15,
Traffic: Http,
Listener: Http, Network: External Y.Y.Y.39 (External IP address of my ISA)
Public name: ESDWebsite
And the rest of the configuration is by default...

What I did is to create a new External network named ExternalESD with the address from my External firewall that PAT the IP to X.X.2.9 from my users IP X.X.10.X.

IP X.X.2.9 is considered External to my ISA...

I changed the From: External to ExternalESD.  When I try to connect to my ESDWebsite, I'm denied access with the error 0xc0040014 FWX_E_FWE_SPOOFING_PACKET_DROPPED.

Every X.X are the same digit and Y.Y.Y are a different subnet than the others.
 
If you want to see graphic I have, I can email it to you or give me a way to post it...
 
Thanks
 
Eric
Post #: 1
RE: Web publishing - From External - 5.Nov.2007 8:04:33 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Why did you create a new ISA Firewall Network for External? That's not required.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to moreauer)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Publishing] >> Web Publishing >> Web publishing - From External Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts