Re: Proxy chain loop errors

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



ISA code doesn't support it.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Jim H" <jimh@xxxxxxxxxxxxx> wrote in message
news:e0BKRJGtIHA.1240@xxxxxxxxxxxxxxxxxxxxxxx
Why not? Windows supports it. What's not supported about it?

"Jim Harrison (ISA SE)" <jmharr@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:A01B0413-97CD-45A0-B220-228B75D7B029@xxxxxxxxxxxxxxxx
"I have 2 external network cards that both have gateway settings. One is
a
cable ISP and one is DSL"

- this is not supported.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"Jim H" <jimh@xxxxxxxxxxxxx> wrote in message
news:u3c0Lo7sIHA.5268@xxxxxxxxxxxxxxxxxxxxxxx
I am getting these errors from my ISA2004 server.

ISA Server detected a proxy chain loop. There is a problem with the
configuration of the ISA Server routing policy.

I have one ISA Server on a small network. The error is happening because
I
have 2 external network cards that both have gateway settings. One is a
cable ISP and one is DSL. I'm not trying to do load balancing or have
some
users go out through the cable modem and others through the DSL modem or
anything like that. It's just redundancy/availability. I have a mail
server published and I have the DNS (outside service) setup with 2 MX
records. One for the cable IP and one for the DSL IP, this way if one
goes
down the other should be available. Also my network can still access the
internet if one of the ISPs goes down. It doesn't need to be automatic, I
can go and disable the NIC for the ISP that's down if necessary. But I
think dead gateway detection should make everything work without me doing
anything. The second external NIC must have a gateway assigned or outside
mail servers will not be able to make SMTP connections to that IP. It's
not
like I can setup a route for every mail server out there.

A lot of what I've been reading has been saying that windows doesn't
support
multiple gateways so ISA doesn't either. But that's not entirely true.
Windows does support multiple gateways and does dead gateway detection.
What windows won't do is know if a packet should go out on gateway A or
gateway B. What windows will do is send all packets out on the default
gateway (the one on the NIC listed first in network advanced setting
(adapters and bindings). If that gateway is down it will try the next
gateway in the list which has a default entry in the routing table. That
will now be the new default gateway until something happens to that
gateway.
I'm not trying to control which gateway they go out on. I don't really
care
which NIC the internet packets go out on as long as they go out.

I think I have everything setup correctly. Everything works fine, but
after
a couple days I started getting these warnings sporadically. Looking at
the
ISA server logs, the times of the warnings correspond to http requests
(antivirus updating itself) that are going out on NIC B instead of NIC A.
I
don't know why this would happen unless the cable modem lost its
connection,
but again, it doesn't really matter since both NICs send the packets out.

In my case, can I ignore these warnings?

Sorry for the long post, I thought the details were important.

Thanks in advance,
jim




.



Relevant Pages

  • Re: Windows File Protection/Wrong CD Problem
    ... Thanks for your comments and suggestion regarding contacting Gateway ... support). ... "Files that are required for Windows to run properly have been replaced by ... > it was pre-installed on your computer by Gateway, you are running an OEM ...
    (microsoft.public.windows.file_system)
  • Re: Windows File Protection/Wrong CD Problem
    ... I didn't follow the links from there because I don't have a Gateway or the support documents or that protected partition with all those files and probably would not have understood further instructions. ... For an OEM-installed WinXP, your support comes from the OEM, not from Microsoft. ... Microsoft Windows MVP ...
    (microsoft.public.windows.file_system)
  • Re: Proxy chain loop errors
    ... ISA Server detected a proxy chain loop. ... have 2 external network cards that both have gateway settings. ... A lot of what I've been reading has been saying that windows doesn't ...
    (microsoft.public.isa)
  • RE: ISA/Client fail over
    ... term gateway. ... This is not a configuration controlled by the ISA server. ... Firewall client does not support automatically failover. ...
    (microsoft.public.isa)
  • Re: Re: Windows File Protection/Wrong CD Problem
    ... The "Insert your Windows XP Professional Service Pack 2 CD now." ... message refers to the integrated Windows XP SP2 install CD-ROM, which you may not have because some ... >Thanks for your comments and suggestion regarding contacting Gateway ... >support). ...
    (microsoft.public.windows.file_system)