Solved

Publish Website behind an ISA server

Posted on 2004-09-22
11
1,848 Views
Last Modified: 2012-06-27
Hi
Hope anybody can help me to workout it.
The goal is I want to publish a website (this is for testing, all that I want to get this site from internet) which is located on the server behind my ISA 2000 firewall.
I tried my best to get it done, but didnt succeed. I will write here what have I done so far, so that you can find out where did i lost.

1. On the Win2K server (server name: TESTSRV) which will play as webserver is behind the ISA and configured as a securenat client.
2. I have put the website contents on this  server with default port (80)
3. The server name can be resolved from anywhere of my LAN. If I type the http://testsrv on the browser on any system in LAN, I could browse the site.

4. ISA server has a public IP, which can be accessible from anywhere the I-net.
5. Okay, now on the ISA Server I have created a destination set with 'testsrv.mydomain.com' with access to any request.
6. Configured Incoming web request listener to the external IP of the ISA server with port 80
7. Created Web Publishing rule to redirect the incoming web request to the specified destination set which points to my web server (testsrv)

Now I connect to internet from my home pc and entered as follows: http://111.111.111.111/testsrv.mydomain.com but it says the page could not be found. Assume that 111.111...is my public IP. even tried with 'http://111.111.111.111./testsrv' but still no luck
Am I correct with all these settings? what should i do more to get browse my site from outside?

Thanks for any help..
0
Comment
Question by:Basheerpt
  • 6
  • 5
11 Comments
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12122490
If your ISA server has a public IP address, and is listening on port 80, and forwarding web requests to the webserver, you would only need to go here: "http://111.111.111.111"

assuming 111.111.111.111 is the public ISP of your ISA server.
0
 
LVL 5

Author Comment

by:Basheerpt
ID: 12122778
Thanks for the response.
My ISA server also contains the exchage server. I think the default website is using by exchange. Is there a way to connect to my site in this way? 'http://111.111.111.111/testsrv'
or similar ways? The webserver is NOT located in the ISA server. its a server in the LAN.

Thanks
0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12122889

I understand.  but there can be only one computer that listens on port 80 for IP address w.x.y.z

what comes after the slash (the virtual directory) is handled by IIS on that particular machine.  you do NOT specify the computer name in the URL.  if you think that the computer that is running ISA is intercepting web requests because you have OWA installed, then your forwarding of port 80 is in conflict with it.

0
Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

 
LVL 5

Author Comment

by:Basheerpt
ID: 12123005
You are right Adam,
I have OWA in the same ISA Server. It may be conflicting as you told. So, how can I resolve it? Can I stop the OWA and redirect port 80 to web server (Eventhough, i dont prefer it)? Or can I use the different port address to listen the web requests and forward to webserver? any of the way, what should i type in the web browser to get in?
Please help with step by step if there are any config issues..

Thanks
0
 
LVL 15

Accepted Solution

by:
adamdrayer earned 125 total points
ID: 12123044
if you configure your webserver to listen on a different port, like port 8018, then you will have to forward port 8018 on our isa server to that computer.

first i would verify that navigating to http://111.111.111.11/ actually takes you to OWA and not to the webserver.

anyway, unfortuantely, after that, you would only be able to attach to your webserver by typing in this address:
http://111.111.111.111:8018/

make sure to delete the port 80 forwarding if you do decide to use a different port.
0
 
LVL 5

Author Comment

by:Basheerpt
ID: 12123096
Thanks Adam, thats a good help of you..
Forwarding you mean the incoming web request listening?
Should I open this port (eg. 8018) manually in ISA server? or will it open automatically as I configure incoming request listener?

0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12123158
To tell the truth, I'm not real familiar with configuring ISA, but if you give me the Version of it you are running, I can do some research
0
 
LVL 5

Author Comment

by:Basheerpt
ID: 12123175
Its okay, its 'ISA 2000 Standard Edition'
0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12123233
Not being able to follow along, you may just want to look at this MS KB article

HOW TO: Configure the Web Publishing Service to Work with Internet Security and Acceleration Server in Windows 2000
http://support.microsoft.com/?kbid=313072


It talks about your situation towards the bottom, so read the whole thing first.
0
 
LVL 5

Author Comment

by:Basheerpt
ID: 12123936
Hi Adam, This time with a good news! it worked with 'ipaddress:port' way..:) through server publishing. Anyway, its fine..
Thanks for your kind help and here is the points that you deserved!!..

0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12123969
thanks alot.. I'm glad you are up and running.  good luck with everything.
0

Featured Post

Portable, direct connect server access

The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I have been asked to explain on many, many occasions the correct way to setup network cards and DNS settings on ISA Server 2004, 2006 and forefront Threat management gateway (FTMG) and have willing done so. I have also promised my self everytime tha…
The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…

792 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question