Welcome to ISAserver.org

Access Denied (policy_denied)

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Web Publishing >> Access Denied (policy_denied)

Page: [1]

Message

<< Older Topic Newer Topic >>

Access Denied (policy_denied) - 19.Apr.2005 10:23:00 AM

SHADi

Posts: 5
Joined: 27.Apr.2004
From: Amman-Jordan
Status: offline

Hi all,

i have ISA server 2004. Im trying to publish a web server in my internal network and im getting the following error:

"Access Denied (policy_denied)
Your system policy has denied access to the requested URL."

The rule is configured as the following:
Action= Allow, From= Anywher, to= Internal web server IP and the forward the original host header is unchecked, Traffic=HTTP, listner: network= External, HTTP port=80.

I can access the web site by using the public IP address (i have not specified FQDN for the site) from the internal network only.

*The ISA server is connected to the internet through ADSL connection.

Any suggestions?

Shadi

Post #: 1

Featured Links*

RE: Access Denied (policy_denied) - 19.Apr.2005 12:46:00 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Shadi,

What errors do you see on the Alerts tab and in the Event Viewer?

Thanks!
Tom

(in reply to SHADi)

Post #: 2

RE: Access Denied (policy_denied) - 20.Apr.2005 11:09:00 AM

SHADi

Posts: 5
Joined: 27.Apr.2004
From: Amman-Jordan
Status: offline

Hi Tom,
thanks for replying, in the alerts tab i see the following error:

"Description: ISA Server detected routes through adapter Loopback that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.) The address ranges in conflict are: 213.186.185.215-213.186.185.215;."

and in the event viewer i see the following:

"The Web Proxy filter failed to bind its socket to 213.186.186.83 port 80. This may have been caused by another service that is already using the same port or by a network adapter that is not functional. To resolve this issue, restart the Microsoft Firewall service. The error code specified in the data area of the event properties indicates the cause of the failure."

In the first error its says that ISA detectd routes through adapter loopback..., and i dont have a loop back adapter?

By the i dont have a fixed IP address im testing the web rule with a dynamic address.

Thanks
Shadi

(in reply to SHADi)

Post #: 3