Problems with DMZ (Full Version)

All Forums >> [ISA Server 2004 Firewall] >> DMZ



Message


guess who -> Problems with DMZ (5.Jun.2008 5:40:10 AM)

Well first of all, I wanna say hi to everyone because i'm new to this site. Really great site to find information about ISA server. ;)

OK, so I've got some question regarding configuring mail and web server for my company and, of course, ISA server. I'm not sure about some part's of the configuration so I need you help ! :)

Well anyway, this is my first configuration of this kind so be reasonable ! ;)

I will have mail and web server and ISA server will serve as firewall and DMZ zone for those two server's.

Here's the picture of my infrastructure:

[image]http://imageupload.com/out.php/i118863_network.jpg[/image]

Now, I have configured everything but i'm having problems with ISA.. [image]http://www.certforums.co.uk/images/smiles/icon_rolleyes.gif[/image]

I have applied rule for sending mail to mail server, that is in DMZ, but i'm getting this error:

"Description: Server publishing rule [my rule] failed because there was no valid network listener. For requests to reach the published server there must be a network relationship between the selected listener networks and the published server. Location 325.934.4.0.2167.887.
For more information about this event, see ISA Server Help.
The failure is due to error: 0x8007000d"

I have created DMZ network and created network rule that says "Source Network - DMZ to Destination Network - External and Network Relationship - NAT".

I dont know what i'm doing wrong ? [image]http://www.certforums.co.uk/images/smiles/icon_sad.gif[/image]

Another thing is that my mail server can't access internet so i can't send e-mails.  [image]http://www.certforums.co.uk/images/smiles/icon_sad.gif[/image]

Thank's for you answers !




HePa -> RE: Problems with DMZ (5.Jun.2008 8:39:33 AM)

Have you tried to set the Network rule to "Route" insted of "NAT"? Is the same error ocuring when Route is set within the relationship?




Jason Jones -> RE: Problems with DMZ (5.Jun.2008 8:43:42 AM)

Have you defined a network rule from Internal to DMZ (or vice-versa)?




guess who -> RE: Problems with DMZ (6.Jun.2008 3:53:00 AM)

Yes, I have tried that also. No luck. [:(]




guess who -> RE: Problems with DMZ (6.Jun.2008 3:53:43 AM)

I have defined rule "Internal to DMZ" but still having the same problem.




guess who -> RE: Problems with DMZ (6.Jun.2008 5:47:53 AM)

What rule do I have to apply to send e-mails from the mail server ? When i login with web access and send mail, it comes back.. :(




Jason Jones -> RE: Problems with DMZ (6.Jun.2008 5:56:38 AM)

Ok, I think we need some details of your publishing rules, in addtion to your network rules - can you provide these?




guess who -> RE: Problems with DMZ (6.Jun.2008 7:18:48 AM)

Here are my mail publishing rules:

[image]http://imageupload.com/out.php/i126186_Clipboard01.jpg[/image]

Beside these I also have POP, HTTP and HTTPS protocols allowed.




HePa -> RE: Problems with DMZ (9.Jun.2008 4:07:48 PM)

You forgot the network rules, those are of biggest interest.




guess who -> RE: Problems with DMZ (10.Jun.2008 9:19:21 AM)

..oops, my bad.. [8|]

[image]http://imageupload.com/out.php/i127512_networkrules.jpg[/image]




Page: [1]