Re: HOW MORE FRUSTRATING CAN THIS GET!!!
From: Tony Su (anonymous_at_discussions.microsoft.com)
Date: 06/08/04
- Next message: Patricio: "Print through ISA Server"
- Previous message: Guy Ellingham: "FTP downloads cause W3Proxy to crash"
- Maybe in reply to: cjobes: "HOW MORE FRUSTRATING CAN THIS GET!!!"
- Next in thread: Tony Su: "Re: HOW MORE FRUSTRATING CAN THIS GET!!!"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 8 Jun 2004 14:49:10 -0700
Hello Claus,
Here, let me cut through the confusion...
First, I'm going to assume that you're working on an
SBS2K3 although you referred to an SBS2K in your original
post... Big difference!
Because the underlying security of Win2K and Win2K3 and
the IIS architecture is so different on each version of
Windows, you're dealing with completely different
procedures and requirements.
Before going further, and again assuming you're working on
a SBS2K3, this is the reason why you are experiencing the
problems you're seeing...
Win2K3 (and SBS2K3) IIS security changed fairly
dramatically. By default, unless IIS is configured for
socket pooling, IIS will listen on only specific IP
addresses and no other.
But, SBS2K3 takes this a step further beyond Win2K3...
during the SBS2K3 setup, it runs a special utility called
SBSIISCONFIG which locks down IIS to one and only one IP
address... the primary LAN address.
So, this is your starting point. You will find that a
default SBS installation does not support IIS websites on
any IP address except for its LAN address.
You now have two main avenues to deploy websites besides
what is installed by default...
1. Deploy all other websites on the same LAN IP address
and use IIS Host Headers (most often the preferred
solution) or non-default ports to differentiate each
website. This solution works well for most Web Publishing
scenarios if you use FQDN in your Destination Set and in
the Action Tab specify the Hostname of your Virtual Website
(If you use non-default ports there are ISA issues, so
post again if you really need to use that method instead
and a full explanation will be given).
2. Because of various reasons, using Host Headers can be
insufficient (ie. does not support SSL, some apps need to
connect to individual IP addresses, maybe your
preference). If you decide you need to deploy your Virtual
Websites on individual LAN IP addresses... <or> if you
want to deploy your website with a WAN IP address... then
you have to undo the configuration created by SBSIISCONFIG
and use normal Win2K3 tools like HTTPCFG to configure your
IIS IPlisteners. To do this, I have published a lengthy
series of procedures with screenshots...
www.su-networking.com/faq/
(click on first link)
HTH,
Tony Su
>-----Original Message-----
>thanks for answering. I will watch the newsgroup.
>
>Beside the packe filters I thought I also need to add the
IP to the list of
>addresses for incoming requests. Is that correct?
>
>"Phillip Windell" <@.> wrote in message
>news:uWBqVnVTEHA.3752@TK2MSFTNGP12.phx.gbl...
>> Ok. I would think Packet filters for allowing http is
all that is needed
>> but I have no experience with SBS. Stick around I know
that there are
>some
>> guys here that know SBS pretty well and they would know
what to do. If
>not
>> then you may also want to post in one of the SBS Groups
as well,...just
>make
>> sure they understand that this is the SBS with ISA
rather than the
>variation
>> that doesn't come with it.
>>
>> --
>>
>> Phillip Windell [MCP, MVP, CCNA]
>> www.wandtv.com
>>
>> "cjobes" <cjobes@nova-tech.org> wrote in message
>> news:uYdMTiRTEHA.3332@TK2MSFTNGP12.phx.gbl...
>> > I would like to run that website ON the ISA. It
doesn't have to be
>BEHIND
>> > it. As I explained in my original post, it's a
SBS2003 box that has all
>> > server components on the same computer. This site has
nothing to do with
>> the
>> > rest of the SBS2003 setup. The SBS2003 domain is
abc.com with its own
>> > website and the additional website is www.def.com. I
just want to use
>the
>> > same box to host that site with a second IP address -
basically telling
>> the
>> > ISA to ignore it and just serve it to the internet.
>> >
>> > Is that possible?
>>
>>
>
>
>.
>
- Next message: Patricio: "Print through ISA Server"
- Previous message: Guy Ellingham: "FTP downloads cause W3Proxy to crash"
- Maybe in reply to: cjobes: "HOW MORE FRUSTRATING CAN THIS GET!!!"
- Next in thread: Tony Su: "Re: HOW MORE FRUSTRATING CAN THIS GET!!!"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|