Re: Cannot access internal website - 502 proxy error

Dear Jeff,

Thank you for your prompt reply.
1. LAN's NIC of ISA 2004 already point to internal DNS server and our DNS
server will forward external requests to DNS server of ISP.
2. I tried to use IP instead of domain name but still the problem.
Any idea ?
Thanks very much,

"Jeff Robinson" <JeffRobinson@xxxxxxxxxxxxxxxxx> wrote in message
news:ugX5F6jMGHA.740@xxxxxxxxxxxxxxxxxxxxxxx
Do you have split (internal) DNS set up? Your clients are attempting to
resolve your internal server's name through ISA2004. If ISA2k can't
resolve the name, it will either forward the request to your ISP's DNS
server or fail the lookup.

Set up ISA2k4 so that it can resolve your domain DNS requests through your
internal DNS server. Let your DNS server then forward any external
requests to your ISP.

To do this, change your NIC settings on the firewall -- DNS server should
point to the IP address of your internal server. Make sure you have your
internal DNS server set up to forward unknown requests (anything not
associated with your domain) to your ISP's DNS server. The internal DNS
will then cache external DNS requests.

When internal clients request www.yourdomain.com, it will return your
internal address. When external clients request www.yourdomain.com, they
will receive the external IP address from your ISP.

If anyone sees any errors in my post, please let me know.

Jeff

Newbievn wrote:
Dear All,

Our users use default SecureNat (client's default gateway point to
Internal
NIC of ISA 2k4) and I config proxy on their IE. The problem occurs after
they have proxy, they cannot access internal website anymore ! If i
uncheck
web proxy then they can.I tried configure Direct Access by adding URL, IP
of
internal wesite in ISA server\Configuration\Network\Internal\Web browser
but
still have the problem. I also try to unbind the Web Proxy application
filter from the Hypertext Transfer Protocol (HTTP) but still the problem.
The error message is
Technical Information (for support personnel)
a.. Error Code: 502 Proxy Error. The ISA Server denied the specified
Uniform Resource Locator (URL). (12202)
b.. IP Address: x.x.x.x
c.. Date: 2/13/2006 10:22:38 AM
d.. Server: aaa.xyz.com
e.. Source: proxy
Please help. Thanks very much.


.

Relevant Pages

  • Re: For you SBS ISA gurus, changing allowed url?
    ... Publishing rules and the SSL cert. ... > ISA blocks all incoming requests that are not www.mycompany.com requests. ... this concern your DNS server. ...
    (microsoft.public.windows.server.sbs)
  • Forwarding for unknown addresses
    ... I'm having a problem with the domain DNS server not ... forwarding requests for our reverse domain to our main DNS ... This server acts as a forwarder - it only knows ... For the Forward Lookup Zone, ...
    (microsoft.public.win2000.dns)
  • Re: Forwarding for unknown addresses
    ... > forwarding requests for our reverse domain to our main DNS ... This server acts as a forwarder - it only knows ... > For the Forward Lookup Zone, ... > win.whatever.com request to a main DNS server. ...
    (microsoft.public.win2000.dns)
  • Re: Track DNS Requests
    ... > look at a cache of requests. ... Technically this is more a cache of responses than requests since ... DNS server had to ask other servers. ...
    (microsoft.public.windows.server.dns)
  • Re: DNS / Proxy Server
    ... I think rather than a DNS server, you are thinking of a proxy server. ... listen on an ip address and port, and accept and forward requests. ... but I know very little about network applications. ...
    (microsoft.public.dotnet.languages.vb)
Loading