Registered users    
MembershipMembership:
Latest New UserLatest:jenisa villarin
New TodayNew Today:13
New YesterdayNew Yesterday:9
User CountOverall:23322

Private messaging    
You must be logged in to use this module.
Top 10 posters    
NamePosts
Mariette Knap12890
Marina Roos12507
Eriq Neale2114
Stan Guinn1913
Michael Patrick1912
Robert Pearman1770
Nick Pieters1425
Stewart Brown616
william warren598
Kevin D.579
Welcome unauthorized visitor    
If you want to join us in the discussions on this forum you need to register first. Registration is free! If you are already a registered user please login to join the forum.
Small Business Server Support Forum    
Subject: ISA blocking Local Library web site
Prev Next
You are not authorized to post a reply.

Author Messages
Anup Gupta User is Offline
USA
Member since
11/3/2007

Registered Users
Posts: 86

1/07/2008 04:57 AM  
The Library web site is fine & operational & accessible by others & from outside the LAN
 
However, from within the LAN, ISA blocks it! Following is the error on "Page can not be displayed" screen...
 
Technical Information (for support personnel)
Error Code 10060: Connection timeout
Background: The gateway could not receive a timely response from the website you are trying to access. This might indicate that the network is congested, or that the website is experiencing technical difficulties.
Date: 1/7/2008 3:56:10 AM
Server: Servername.Domain.local
Source: Firewall
Any suggestions? Thx.
robert pearman User is Offline
United Kingdom
Member since
2/23/2007

Platinum Membership
Posts: 1770

1/07/2008 01:32 PM  
is isa trying to connect to the right website? is it on a default port?

is traffic allowed to that site?

check the dns lookup info from the server to see if it matches a dns lookup of the site from outside the network.
Anup Gupta User is Offline
USA
Member since
11/3/2007

Registered Users
Posts: 86

1/07/2008 01:44 PM  
Yes. connecting to right site.

Traffic is allowed.

Could you please elaborate on the DNS lookup suggestion? How do we do that?

Thx for your help.
robert pearman User is Offline
United Kingdom
Member since
2/23/2007

Platinum Membership
Posts: 1770

1/07/2008 01:46 PM  
from inside the lan, open a cmd prompt.

type nslookup

www.librarywebsite.com

see if the ip address returned is the same as what is returned when you do the same test from an external host.

also have you run the isa monitor whilst trying to connect to this site?
Anup Gupta User is Offline
USA
Member since
11/3/2007

Registered Users
Posts: 86

1/07/2008 01:59 PM  
NSLOOKUP for library within LAN comes up as "Non-existent domain with the IP of local Server 192.168.16.2.

Have not run the ISA monitor yet. Will try that next.
robert pearman User is Offline
United Kingdom
Member since
2/23/2007

Platinum Membership
Posts: 1770

1/07/2008 02:12 PM  
what is the url of the site you are having trouble with? ie. http://www.mydomain.com
Anup Gupta User is Offline
USA
Member since
11/3/2007

Registered Users
Posts: 86

1/07/2008 02:16 PM  
www.trumbullct-library.org

Checked Monitor. Says ISA web proxy timed out.
robert pearman User is Offline
United Kingdom
Member since
2/23/2007

Platinum Membership
Posts: 1770

1/07/2008 02:22 PM  
from the server, go into cmd prompt.

type nslookup

then type

www.trumbullct-library.org

and post back the whole cmd window.
Anup Gupta User is Offline
USA
Member since
11/3/2007

Registered Users
Posts: 86

1/07/2008 02:30 PM  
Did that. Says the same thing. Cant find the Server name for address 192.168.16.2. Non-existent Domain. Default Servers are not available.
Server: Unknown
Addr: 192.168.16.2

Non-authoritative answer:
Name: trumbullct-library.org
addres: 204.60.194.72
Alias: www.trumbullct-library.org
robert pearman User is Offline
United Kingdom
Member since
2/23/2007

Platinum Membership
Posts: 1770

1/07/2008 02:42 PM  
well i get different results.

C:\Program Files\Support Tools>nslookup
Default Server: myserver.local
Address: 192.168.10.4

> www.trumbullct-library.org
Server: myserver.local
Address: 192.168.10.4

Non-authoritative answer:
Name: www.trumbullct-library.org
Address: 205.246.18.117

so we can see that there is something wrong.

firstly to fix the -
Server: Unknown
Addr: 192.168.16.2
- problem we simply need to add a reverse dns lookup zone for the network 192.68.16.x and run ipconfig /registerdns frrom the server.

second we need to know why your outbound dns requests are not receiving correct responses.

do you use your isp as a dns forwarder?
Anup Gupta User is Offline
USA
Member since
11/3/2007

Registered Users
Posts: 86

1/07/2008 02:50 PM  
Hi Robert,

Reverse DNS IS setup for 16.x. I just checked again.

The Q is why only this one & only one web site. DNS forwarders, Reverse DNS etc. would affect other sites too.

Sorry but am confused because of this Question
robert pearman User is Offline
United Kingdom
Member since
2/23/2007

Platinum Membership
Posts: 1770

1/07/2008 02:58 PM  
not nessecarily- for example if this site has recently moved your isp may not have received the updated dns info yet.
Anup Gupta User is Offline
USA
Member since
11/3/2007

Registered Users
Posts: 86

1/07/2008 02:59 PM  
No Robert.

No changes at this site. Confirmed.
robert pearman User is Offline
United Kingdom
Member since
2/23/2007

Platinum Membership
Posts: 1770

1/07/2008 03:26 PM  
in that case i would suggest you take the issue up with whoever provides your external dns resolution. usually your isp.

if you internal reverse dns zone is indeed setup, then your server is not registered in the zone, otherwise you would not receive a server 'unknown' response in nslookup.

You are not authorized to post a reply.
Forums > Microsoft Small Business Server 2003 & 2000 > ISA Server 2004 > ISA blocking Local Library web site



ActiveForums 3.7
Forum policy    
These Discussion Forums are dedicated to the discussion of the Small Business Server and related server and client software. For the benefit of the community please observe the following posting guidelines:
  1. No Advertising. This includes promotion of commercial products and non-commercial products which are not directly related to Small Business Server and related server and client software.
  2. No Flaming or Trolling.
  3. No Profanity, Racism, or Prejudice.
  4. Site Moderators have the final word on approving/removing a thread or post or comment.