• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Redirecting a host header

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Redirecting a host header Page: [1]
Login
Message << Older Topic   Newer Topic >>
Redirecting a host header - 23.Dec.2010 5:05:26 PM   
hrsanchez

 

Posts: 146
Joined: 30.Nov.2007
From: Argentina
Status: offline
Hi,

I want to know if it is possible to Tmg to redirect a host, for example, tmg receive a request to host1.domain.com ( ip: xx1.xx2.xx3.xx4 )and redirect it to ( ip: yy1.yy2.yy3.yy4 ) maintaining the host header ( host1.domain.com ).
Regards,

_____________________________

Eng.Hector Sanchez
MCSE + Security 2000/2003
MCTS Isa 2004/Isa 2006
Post #: 1
RE: Redirecting a host header - 4.Jan.2011 9:45:37 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
You can create Web Publishing Rules that deny the connection and then configure the rule to redirect to the location you want to client to connect to.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to hrsanchez)
Post #: 2
RE: Redirecting a host header - 4.Jan.2011 6:17:18 PM   
ferrix

 

Posts: 547
Joined: 16.Mar.2005
Status: offline
"Actually I thought about this for a minute and I don't think Tom's solution will do what you were asking for.  You want to keep the host header, so the browser needs to keep the same FQDN but go to a different IP.  But there's no way for an HTTP redirect to do that!  Redirecting to the yy IP would cause the IP address to be used as the host header.  Redirecting to another FQDN would make that new DN be the host header.

What you need is a web filter that will change the routing target to a different IP.  You could do this quite trivially in IsaScript.  Make an access rule that matches only the one FQDN you care about.  Then for that rule's script use something like:

function OnRouting(args)
  args.pszHost = "yy1.yy2.yy3.yy4"
  return SF_STATUS_REQ_NEXT_NOTIFICATION
end


That will make TMG forget the original IP target and replace it with the new one you want.  The browser will never know the difference.

(in reply to hrsanchez)
Post #: 3
RE: Redirecting a host header - 26.Jan.2011 2:52:02 PM   
hrsanchez

 

Posts: 146
Joined: 30.Nov.2007
From: Argentina
Status: offline
Thank you , Tom and Ferrix!.
I need to do Ferrix“s solution.
I will try with IsaScript.
Regards,

Hector

_____________________________

Eng.Hector Sanchez
MCSE + Security 2000/2003
MCTS Isa 2004/Isa 2006

(in reply to ferrix)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Redirecting a host header Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts