[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now


Unable to publish a website though ISA server

Posted on 2006-04-05
Medium Priority
Last Modified: 2010-03-18

Here is my situation:
We have a SBS2000 acting as gateway, and a web server inside the network. Up to this morning all was well: the web server was published through ISA using http headers, and the SBS IIS itself was also serving some pages.

This morning I had to change the physical link to the internet and since, I'm unable to publish my sites, from either server.
Of course the change included a change in our public IP.
The rest is OK: we surf, we get our mail through exchange relay, we do FTP, so it must be somehow that ISA is off the track but I can't find the trick.
Please help.

If you want to see the http answer, go here: http://www.floredefrance.com/ its one of the websites.
Thanks for your help !!!!
280 points is all I have at the moment, sorry guys !
Question by:tarbault
  • 3
  • 3

Author Comment

ID: 16382029
Maybe useful:

I arranged for the new router to have the same internal adress as the old one, and kept the same IP for the network card on the wan side (that which is linked to the router).
I was hoping to minimise the downtime  by doing so, but now, I'm wondering if ISA is botched because only the public IP has changed and it needs some flushing before it can work again ?

Another track is propagation time: as the public IP is different, it might take some time to get thing up. But I'm not too shure: I use DNS host for one site and web redirect for another and neither works...

Ideas anyone ?
LVL 51

Accepted Solution

Keith Alabaster earned 840 total points
ID: 16389181
Sorry chief. I missed the ISA question in the list. Assume this is ISA 2000?
If just the external IP changed I think you will find its simply a propagation issue.

ISA does not hold the xlate details for example nor will it care about the arp details for the external. I think you will find its simply a case of patience.
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16389192

Checking your DNS records, these look clean. it shows you are not hosting your own email server for this domain (The MX records) so I still cannot see an issue. Propagation can take up to 72 hours; lets hope the ISP made a good job of the change :)
Fill in the form and get your FREE NFR key NOW!

Veeam is happy to provide a FREE NFR server license to certified engineers, trainers, and bloggers.  It allows for the non‑production use of Veeam Agent for Microsoft Windows. This license is valid for five workstations and two servers.


Author Comment

ID: 16389364
Ca it really be a propagation issue ?
I must add details I'm afraid.

www.floredefrance.com is not a good example.
it is my personal domain, which I sometimes use for testing as admin of the network. For now it has been rerouted to another server (and is operational) so lets forget it. Sorry about that.

Our permanent problem can be seen here: santexcel<dot>no-ip<dot>info
This domain is hosted by no-ip as a simple web redirect.
The server can be reached, but says connection refused:

10061 - Connexion refusée
Internet Security and Acceleration Server

So it is not a routing issue: you can get there, but cannot go through.

The same webserver responds OK when queried on its local interface: http://10.0.0.x/folder:

Author Comment

ID: 16390041
Ok, problem solved.

As it was, it had nothing to do with ISA !
Having tested evrything else, I tried switching between the links: the old one, which worked, and the old one which did not.

When on the old connection, the websites were published allright, when on the new one (new router, higher bandwith) they were unreachable.

I got in touch with our provider who checked the router config (and after several "what's this mess ?" and other niceties I wasn't supposed to hear) the tech came back to me and said that the config was perfectly ok on his side.
Strangely enough, after that, everything began to work OK...
So I came to the conclusion that they had botched the router config in the first place and put it right when I phoned.

Thanks Keith for the help.
I gladly give you the points, if only just for trying to help ! That's reason enough to me !
LVL 51

Expert Comment

by:Keith Alabaster
ID: 16390213
Thank you.


Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Nslookup is a command line driven utility supplied as part of most Windows operating systems that can reveal information related to domain names and the Internet Protocol (IP) addresses associated with them. In simple terms, it is a tool that can …
This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Are you ready to place your question in front of subject-matter experts for more timely responses? With the release of Priority Question, Premium Members, Team Accounts and Qualified Experts can now identify the emergent level of their issue, signal…

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question