Welcome to ISAserver.org

RE: DNS on ISA 2000

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> General >> RE: DNS on ISA 2000

Page: << < prev 1 2 [3]

Message

<< Older Topic Newer Topic >>

RE: DNS on ISA 2000 - 16.Sep.2005 12:37:00 PM

DanaK

Posts: 72
Joined: 10.Jan.2003
From: San Angelo, TX
Status: offline

Dear Mr. Pouseele.

You and I talked about this very thing almost exactly one year ago. I know this because I've just dug up the thread I printed out back then (it started on Oct. 13, 2004) jammed into the back of my ISA 2K book.

Please post somewhere on this wonderful site a notice that if ANYONE is running Symantec's Antivirus Corporate Edition version 9 or 10 (I'm running the latter) on their ISA server PLEASE, PLEASE DISABLE the Internet e-mail autoprotect service located in the Configure menu item in the top menu bar of their client software.

I do NOT understand how this was not happening BEFORE we changed the external NIC and router addresses. I'm not sure I even WANT to know but I knew it had to be something simple like this. None of Dr. Shinder's articles ever ran into such extended troubleshooting processes for something that should be this simple.

Do you think I ought to back up a few steps and remove or disable the S&C rule for the mail servers? I'm still a little concerned about the two mail server hosts being moved to a different server when we least expect it.

Thank you for everything - but don't go too far. This may not be over yet!

Dana

[ September 16, 2005, 12:54 PM: Message edited by: DanaK ]

(in reply to DanaK)

Post #: 41

Featured Links*

RE: DNS on ISA 2000 - 16.Sep.2005 1:31:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Dana,

ha... http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=2;t=014118 ! [Wink]

Now, for the changes you have made:

1. The IP change on the external interface was needed, otherwise it is an illegal and unsupported configuration.

2. You don't need necessarily a *separate* S&C rule for the mail servers. In other words, there must be just a S&C rule in place who allows access to those destinations.

3. For the destination set you can use FQDN's instead of IP addresses if and only if the reverse DNS of the mail server IP addresses is properly configured. The point is that the request is sent by IP address. So, if you have FQDN's in the destination set, ISA must be able to do a reverse lookup and match the result with the content of the destination set.

HTH,
Stefaan

(in reply to DanaK)

Post #: 42

RE: DNS on ISA 2000 - 16.Sep.2005 5:02:00 PM

DanaK

Posts: 72
Joined: 10.Jan.2003
From: San Angelo, TX
Status: offline

If you're really in Belgium you must have a Starbucks around there that serves its brew in IV bags. I didn't think you'd be up and answering my little problems here all during today. [Big Grin]

I will definitely print out this last tome as we've gone back over some very important points that I don't belive we covered the last time. It's certainly worth the ink.

Thanks for your patience over the last two weeks.
Dana

(in reply to DanaK)

Post #: 43