Thinkagain -> Proxy chain loop when adding upstream proxy (12.Nov.2004 10:17:00 AM)
I've setup a ISA2004 server with 4 interfaces.
External: 172.16.X.X (connected to an adsl router)
Only the external interface has a default gateway .
The adapter order under "advanced settings" are in the above order.
All adapters are using the same dns-servers, one in the internal network and the other local on the ISA server.
On this machine I am also using TrendMicro's Interscan Web Security Suite (IWSS).
The IWSS is configured to retrieve its pages direct without using a proxy.
The intention is to let the users connect to the ISA server (on port 8080) and let the ISA server connect to the IWSS (on port 8081)
As soon as i modify the "Last Default Rule" under "Web Chaining" the looping starts.
I've tried to set this to the localhost address, internal interface address and external interface address with no result
A browser with the proxy set at port 8080 or 8081 receives the error code: 12206 which is the "Proxy chain loop". In the application log eventid 14141 starts.
It seems that traffic from the IWSS gets intercepted by the ISA server which according to its configuration forwards it to the IWSS, eventually creating a loop.
The microsoft event description states that there is a routing problem, I cant seem to find it.
When I start monitoring several messages pass by, one of these is eventually: Failed Connection Attempt (which is probably the logical result of the loop). I do not receive any Deny messages.
I thought this might have something to do with the network rules (route / nat), but I cannot add or modify any rules with the "Local Host" network as source.
I've searched through several forums but have not found any answers. It seems that others do not post the solution if they receive it from another information source than than this forum post.
Anyone?, I'm pretty much out of ideas.
Please let me know if you're using a similar configuration with an upstream proxy installed locally on the isa server so we can exchange ideas.