Welcome to ISAserver.org

Can't get "Original IP address and Requests appear to come from the Original Client" working

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Can't get "Original IP address and Requests appear to come from the Original Client" working

Page: [1]

Message

<< Older Topic Newer Topic >>

Can't get "Original IP address and Requests appear... - 8.Mar.2012 9:15:33 AM

FlavioCardoso

Posts: 3
Joined: 8.Mar.2012
Status: offline

Hello, please help!

I have a TMG machine on the web and a application cluster with two nodes in the internal network. The two cluster machines are pointing the TMG server's internal network adapter as the default gateway. The DNS server used is on internal network.

On the TMG's side I have a directive granting access to DNS, HTTP, HTTPS and PING protocols for all internal users.

I've followed the infos in http://forums.isaserver.org/m_210005700/mpage_1/key_/tm.htm and I'm still with no results.

I need to get the original client IP addresses on cluster's apps and I have no more ideas of what else can I do or even what I'm doing wrong.

Thanks a lot.

_____________________________

Fl�vio S Cardoso

Post #: 1

Featured Links*

RE: Can't get "Original IP address and Requests ap... - 9.Mar.2012 1:26:51 AM

hadideveloper

Posts: 156
Joined: 20.Jun.2011
Status: offline

Hi,
how do you get the client ip?
if you proceed the steps in http://forums.isaserver.org/m_210005700/mpage_1/key_/tm.htm then there may be application issue.
because of isa you can not get client ip directly because there is proxy server(isa) between client and the server for example in C# for getting the client ip you should use Request.ServerVariables["REMOTE_ADDR"]; or Request.ServerVariables["HTTP_X_FORWARDED_FOR"]; depends on the confirguration

(in reply to FlavioCardoso)

Post #: 2

RE: Can't get "Original IP address and Requests ap... - 9.Mar.2012 5:59:56 AM

FlavioCardoso

Posts: 3
Joined: 8.Mar.2012
Status: offline

Yeap, that's why it's driving me crazy. I'm using Reques.ServerVariables to get client into. Even IIS is logs contains the TMG IP address.

I'll try again, more relaxed, maybe I made something wrong. Review my settings and even create a VM to test. The configuration is so simple... I'll check all the configurations again.

Thanks a lot

(in reply to FlavioCardoso)

Post #: 3

RE: Can't get "Original IP address and Requests ap... - 9.Mar.2012 6:07:45 AM

neverwinter

Posts: 10
Joined: 11.Sep.2011
From: Italy
Status: offline

Try this free webfilter : http://itboard.ro/blogs/jurnal_de_vet/archive/2011/03/30/x-forwarded-for-pentru-tmg.aspx

(in reply to hadideveloper)

Post #: 4

RE: Can't get "Original IP address and Requests ap... - 9.Mar.2012 6:25:02 AM

FlavioCardoso

Posts: 3
Joined: 8.Mar.2012
Status: offline

I've got the same error on the VM. It's navigating normally, but when I request a page through TMG, it simply doesn't responds.

I'm trying to not use third party software, because if the TMG has this feature, I need to find a way to turn it working well.

hadideveloper, I'll try this way first, your advice will be used if I can't get the work done. Thanks a lot

(in reply to neverwinter)

Post #: 5

Page: [1]	<< Older Topic Newer Topic >>

All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Can't get "Original IP address and Requests appear to come from the Original Client" working

Page: [1]