Solved

Publish Website behind an ISA server

Posted on 2004-09-22
11
1,832 Views
Last Modified: 2012-06-27
Hi
Hope anybody can help me to workout it.
The goal is I want to publish a website (this is for testing, all that I want to get this site from internet) which is located on the server behind my ISA 2000 firewall.
I tried my best to get it done, but didnt succeed. I will write here what have I done so far, so that you can find out where did i lost.

1. On the Win2K server (server name: TESTSRV) which will play as webserver is behind the ISA and configured as a securenat client.
2. I have put the website contents on this  server with default port (80)
3. The server name can be resolved from anywhere of my LAN. If I type the http://testsrv on the browser on any system in LAN, I could browse the site.

4. ISA server has a public IP, which can be accessible from anywhere the I-net.
5. Okay, now on the ISA Server I have created a destination set with 'testsrv.mydomain.com' with access to any request.
6. Configured Incoming web request listener to the external IP of the ISA server with port 80
7. Created Web Publishing rule to redirect the incoming web request to the specified destination set which points to my web server (testsrv)

Now I connect to internet from my home pc and entered as follows: http://111.111.111.111/testsrv.mydomain.com but it says the page could not be found. Assume that 111.111...is my public IP. even tried with 'http://111.111.111.111./testsrv' but still no luck
Am I correct with all these settings? what should i do more to get browse my site from outside?

Thanks for any help..
0
Comment
Question by:Basheerpt
  • 6
  • 5
11 Comments
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12122490
If your ISA server has a public IP address, and is listening on port 80, and forwarding web requests to the webserver, you would only need to go here: "http://111.111.111.111"

assuming 111.111.111.111 is the public ISP of your ISA server.
0
 
LVL 5

Author Comment

by:Basheerpt
ID: 12122778
Thanks for the response.
My ISA server also contains the exchage server. I think the default website is using by exchange. Is there a way to connect to my site in this way? 'http://111.111.111.111/testsrv'
or similar ways? The webserver is NOT located in the ISA server. its a server in the LAN.

Thanks
0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12122889

I understand.  but there can be only one computer that listens on port 80 for IP address w.x.y.z

what comes after the slash (the virtual directory) is handled by IIS on that particular machine.  you do NOT specify the computer name in the URL.  if you think that the computer that is running ISA is intercepting web requests because you have OWA installed, then your forwarding of port 80 is in conflict with it.

0
 
LVL 5

Author Comment

by:Basheerpt
ID: 12123005
You are right Adam,
I have OWA in the same ISA Server. It may be conflicting as you told. So, how can I resolve it? Can I stop the OWA and redirect port 80 to web server (Eventhough, i dont prefer it)? Or can I use the different port address to listen the web requests and forward to webserver? any of the way, what should i type in the web browser to get in?
Please help with step by step if there are any config issues..

Thanks
0
 
LVL 15

Accepted Solution

by:
adamdrayer earned 125 total points
ID: 12123044
if you configure your webserver to listen on a different port, like port 8018, then you will have to forward port 8018 on our isa server to that computer.

first i would verify that navigating to http://111.111.111.11/ actually takes you to OWA and not to the webserver.

anyway, unfortuantely, after that, you would only be able to attach to your webserver by typing in this address:
http://111.111.111.111:8018/

make sure to delete the port 80 forwarding if you do decide to use a different port.
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 5

Author Comment

by:Basheerpt
ID: 12123096
Thanks Adam, thats a good help of you..
Forwarding you mean the incoming web request listening?
Should I open this port (eg. 8018) manually in ISA server? or will it open automatically as I configure incoming request listener?

0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12123158
To tell the truth, I'm not real familiar with configuring ISA, but if you give me the Version of it you are running, I can do some research
0
 
LVL 5

Author Comment

by:Basheerpt
ID: 12123175
Its okay, its 'ISA 2000 Standard Edition'
0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12123233
Not being able to follow along, you may just want to look at this MS KB article

HOW TO: Configure the Web Publishing Service to Work with Internet Security and Acceleration Server in Windows 2000
http://support.microsoft.com/?kbid=313072


It talks about your situation towards the bottom, so read the whole thing first.
0
 
LVL 5

Author Comment

by:Basheerpt
ID: 12123936
Hi Adam, This time with a good news! it worked with 'ipaddress:port' way..:) through server publishing. Anyway, its fine..
Thanks for your kind help and here is the points that you deserved!!..

0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12123969
thanks alot.. I'm glad you are up and running.  good luck with everything.
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

A common practice in small networks is making file sharing easy which works extremely well when intra-network security is not an issue. In essence, everyone, that is "Everyone", is given access to all of the shared files - often the entire C: drive …
Resolve DNS query failed errors for Exchange
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now