RE: Redirect script no longer works after SP1



Hello Jeremy,

Thank you for posting to the SBS Newsgroup.

I have read through your old post in the following weblink:

Redirect address
http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_fr
m/thread/a8b5e82498209c6b/

Combining with your current post, I understand that you want to redirect
http://www.fqdn.com/remote to https://www.fqdn.com/remote. If I have
misunderstood your concern, please let me know.

Actually, on SBS 2K3 server, we use Internet Server Application Programming
Interface (ISAPI) Filter to achieve this function.

An ISAPI filter, SBSFLT (%systemdrive%\Inetpub\sbsflt\sbsflt.dll), is
loaded on the Default Web Site. The filter is used to redirect all incoming
RWW requests from HTTP to HTTPS if SSL is enabled. In case one forgets to
access the RWW securely, the ISAPI filter can redirect the request to a
secure channel to ensure that all communications through Remote Web
Workplace are encrypted.

Another feature of this filter is to redirect all SharePoint traffic from
port 443 to 444. If you connect to Companyweb by http://companyweb with the
SBSFLT filter enabled, you will be redirected automatically to
https://companyweb:444.

When you access the http website which requires SSL on the default website
of SBS 2k3 server, the traffic will be redirected to the https
automatically. This is functioned by the ISAPI redirection filter on the
SBS 2k3 Default website with name of SBSFLT and path of
c:\inetpub\sbsflt\sbsflt.dll.

However, please understand this filter is designed for the SBS specific
website and web portal. We cannot guarantee it will work fine for your
custom website. Generally, if you need to enforce SSL for your own website,
you have to use HTTPS URL, or you will get error 'HTTP Error 403.4 -
Forbidden: SSL is required to view this resource.'

To do so, please see:

a. Open Internet Information Services\Yourdomain (local computer)\Web
Sites\Default Web Site.

b. Right click Default Web Site, go to Properties, ISAPI Filters.

c. Click Add, click Browse, go to %system root%\inetpub\sbsflt.

d. Select sbsflt.dll.

For companyweb, repeat the same steps above, select shrptflt.dll.

e. Click Open and OK twice.

f. Open a command window and type "iisreset" (without quotation marks).

g. Test the issue again.

To ensure the SBS filter is functioning well you could have the following
test on the internet or intranet.

http://www.fqdn.com/exchange

http://www.fqdn.com/remote

They should be redirected to following addresses automatically.

https://www.fqdn.com/exchange

https://www.fqdn.com/remote

Hope this information helps. If you meet any error when trying to access
above web sites, please fee free to let me know. I am looking forward to
your reply!

Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>From: "Jeremy Gollehon" <j_gollehonBLAMSPAM@xxxxxxxxxxx>
>Subject: Redirect script no longer works after SP1
>Date: Mon, 29 Aug 2005 11:35:37 -0700
>Lines: 30
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>X-RFC2646: Format=Flowed; Original
>Message-ID: <emv2yhMrFHA.2588@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: 66-224-14-74.atgi.net 66.224.14.74
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:148853
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I wrote the following default.asp script and put it in my
>C:\Inetpub\wwwroot. It worked great before the SP1 install (with the
>upgrade to ISA 2004). Now however, ISA is blocking the redirect:
>"Error Code: 403 Forbidden. The server denied the specified Uniform
Resource
>Locator (URL). Contact the server administrator. (12202)"
>
>I posted about this before, and must have figured out the solution, but
>didn't post back. :-(
>http://snipurl.com/haom
>
>I'm sure it's an ISA firewall policy of some sort, but I'm not sure what I
>did to solve the problem before. Any help is greatly appreciated.
>
>-Jeremy
>
>
>
>default.asp
>-------------------------------------------------------------------------
><%
> Select Case Request.ServerVariables("HTTP_HOST")
> Case "remote.mycompany.com"
> Response.Redirect("https://remote.mycompany.com/remote/";)
> Case Else
> Response.Redirect("/homepage.htm")
> End Select
>%>
>-------------------------------------------------------------------------
>
>
>

.



Relevant Pages

  • Re: OWA URL redirect problem (possible fax issue resolution)
    ... Welcome to SBS newsgroup. ... I understand that you encountered problem in web server redirecting. ... You can ask your ISP who host your FQDN to redirect the request ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS 2K3 Web Filtering
    ... or use some third party software to filter the web site. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS 2K3 Web Filtering
    ... I do have SBS 2003 Premium. ... or use some third party software to filter the web site. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS2k3 ISA - Default name for incoming SMTP Packet Filter
    ... Thank you for posting in SBS newsgroup. ... SBS SmtpPredefinedType is actually for incoming SMTP ... When you run CEICW to enable packet filtering and incoming SMTP ... this filter will be created in the IP Packet Filter. ...
    (microsoft.public.windows.server.sbs)
  • RE: user cant see files/folders in My Docs
    ... Ensure the My Documents on client properly redirect to SBS: ... Check the NTFS permission of the missing file and folder: ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)

Loading