• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Cannot Access External URL Containing 8080

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> Access Policies >> Cannot Access External URL Containing 8080 Page: [1]
Login
Message << Older Topic   Newer Topic >>
Cannot Access External URL Containing 8080 - 14.Oct.2009 4:00:14 PM   
YukiTech

 

Posts: 2
Joined: 14.Oct.2009
Status: offline
My users often receive email notifications with URL links (with port 8080) to PDF files which can be accessed just fine outside our network.  Internal network users behind our ISA 2006 SP1 firewall can also access http://odpsrv.tiu11.org just fine.
 
However, when anyone including myself tries to access any direct link to a PDF on this site such as:
http://odpsrv.tiu11.org:8080/alfresco/d/d/workspace/SpacesStore/6ca43091-52b5-4baf-ac43-55b157371620/Cost_Report_Submission_Deadline_Reminder_Announcement.pdf
or
http://odpsrv.tiu11.org:8080


The browser (IE 7.0.5730.13) displays the following:
 
Network Access Message: The page cannot be displayed 
Explanation: The Web server refused the connection.

Try the following:
Refresh page: Search for the page again by clicking the Refresh button. The timeout could have occurred due to Internet congestion.
Check spelling: Check that the Web page address is spelled correctly. The address may have been mistyped.
Access from a link: If there is a link to the page you are looking for, try accessing the page from that link.
Contact website: You may want to contact the website administrator to make sure the Web page still exists. You can do this by using the e-mail address or phone number listed on the website home page.
If you are still not able to view the requested page, try contacting your administrator or Helpdesk.

Technical Information (for support personnel)
Error Code 10061: Connection refused
Background: The server you are attempting to access has refused the connection with the gateway. This usually results from trying to connect to a service that is inactive on the server.
Date: 10/14/2009 7:44:46 PM [GMT]
Server: BCBHISA.bcbh.org
Source: Remote server



The ISA Server monitoring query displays the following:
 
Failed Connection Attempt BCBHISA 10/14/2009 3:34:53 PM
Log type: Web Proxy (Forward)
Status: 10061 No connection could be made because the target machine actively refused it. 
Rule: Internet Traffic
Source: Internal (172.16.247.106)
Destination: External (208.87.79.72:8080)
Request: GET
http://odpsrv.tiu11.org:8080/alfresco/d/d/workspace/SpacesStore/6ca43091-52b5-4baf-ac43-55b157371620/Cost_Report_Submission_Deadline_Reminder_Announcement.pdf
Filter information: Req ID: 0c2cd0a6; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: BCBH\JPY
Additional information
Client agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; InfoPath.1)
Object source: Internet (Source is the Internet. Object was added to the cache.)
Cache info: 0x0
Processing time: 3266 ms
MIME type:
 
Post #: 1
RE: Cannot Access External URL Containing 8080 - 14.Oct.2009 5:06:27 PM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
The network trace on ISA at the time of testing will give you more details than the ISA logging alone.

Check which server setting RST flag in the packet traces.

_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to YukiTech)
Post #: 2
RE: Cannot Access External URL Containing 8080 - 15.Oct.2009 8:38:52 AM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

it worked fine for me. Is you ISA firewall on the edge?

Regards,
Paulo Oliveira.

_____________________________

Microsoft Premier Field Engineer (PFE)
Blog: http://poliveirasilva.wordpress.com/
Twitter: https://twitter.com/poliveirasilva

(in reply to YukiTech)
Post #: 3
RE: Cannot Access External URL Containing 8080 - 15.Oct.2009 10:02:27 AM   
YukiTech

 

Posts: 2
Joined: 14.Oct.2009
Status: offline
Where and how do I do a network trace on ISA?

(in reply to inderjeet)
Post #: 4
RE: Cannot Access External URL Containing 8080 - 19.Oct.2009 3:40:06 PM   
poiuy

 

Posts: 82
Joined: 20.Oct.2005
Status: offline
Do you have an Access rule that allows traffic on port 8080? That is a not a common port on ISA and you have to create a custom port and add it to your allowed rule for Internet Access (Normally 80 and 443).

_____________________________

poiuy the Nemisis of qwerty

(in reply to YukiTech)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> Access Policies >> Cannot Access External URL Containing 8080 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts