Similar Threads:
1.Multiple Internal Networks - ISA Server detected routes...
Hi folks,
Need some help please with the "ISA Server detected routes through adapter"
warnings...
On a new implementation of a 2 node ISA 2006 array I have multiple internal
networks:
10.1.0.0/255.255.240.0 - Network1
10.2.0.0/255.255.240.0 - Network2
10.3.0.0/255.255.240.0 - Network3
172.1.1.0/255.255.255.0 - DMZ
192.168.1.0/255.255.255.0 - Intra-array
1.1.1.0/255.255.255.0 - Internet
I created the network definitions using only the 10.1.0.0 to 10.1.7.255 as I
cannot put the 10.255.255.255 in multiple networks which adding the adapter
would do...
..but thats where my problem is I believe, in thats what ISA wants??
What have I done wrong, or is this a fundamental design problem?
Can the errors be ignored as it all appears to work, or should I change the
configuration, or should I use 172 networks rather than 10 networks (so I can
use 172.x.255.255 in the network definitions) ??
Thanks,
Paul
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 1.1.1.1 1.1.1.3 10
10.1.0.0 255.255.240.0 10.1.4.3 10.1.4.3 10
10.1.4.2 255.255.255.255 127.0.0.1 127.0.0.1 10
10.1.4.3 255.255.255.255 127.0.0.1 127.0.0.1 10
10.2.0.0 255.255.240.0 10.2.4.3 10.2.4.3 10
10.2.4.2 255.255.255.255 127.0.0.1 127.0.0.1 10
10.2.4.3 255.255.255.255 127.0.0.1 127.0.0.1 10
10.3.0.0 255.255.240.0 10.3.4.3 10.3.4.3 20
10.3.4.2 255.255.255.255 127.0.0.1 127.0.0.1 20
10.3.4.3 255.255.255.255 127.0.0.1 127.0.0.1 20
10.255.255.255 255.255.255.255 10.1.4.3 10.1.4.3 10
10.255.255.255 255.255.255.255 10.2.4.3 10.2.4.3 10
10.255.255.255 255.255.255.255 10.3.4.3 10.3.4.3 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
172.1.1.0 255.255.255.0 172.1.1.3 172.1.1.3 10
172.1.1.2 255.255.255.255 127.0.0.1 127.0.0.1 10
172.1.1.3 255.255.255.255 127.0.0.1 127.0.0.1 10
172.1.255.255 255.255.255.255 172.1.1.3 172.1.1.3 10
192.168.1.0 255.255.255.0 192.168.1.1 192.168.1.1 10
192.168.1.1 255.255.255.255 127.0.0.1 127.0.0.1 10
192.168.1.255 255.255.255.255 192.168.1.1 192.168.1.1 10
193.129.219.0 255.255.255.0 1.1.1.3 1.11.1.3 10
1.1.1.2 255.255.255.255 127.0.0.1 127.0.0.1 10
1.11.1.3 255.255.255.255 127.0.0.1 127.0.0.1 10
1.1.1.255 255.255.255.255 1.1.1.3 1.1.1.3 10
224.0.0.0 240.0.0.0 10.1.4.3 10.1.4.3 10
224.0.0.0 240.0.0.0 10.2.4.3 10.2.4.3 10
224.0.0.0 240.0.0.0 10.3.4.3 10.3.4.3 20
224.0.0.0 240.0.0.0 172.1.1.3 172.1.1.3 10
224.0.0.0 240.0.0.0 192.168.1.1 192.168.1.1 10
224.0.0.0 240.0.0.0 1.1.1.3 1.1.1.3 10
255.255.255.255 255.255.255.255 10.1.4.3 10.1.4.3 1
255.255.255.255 255.255.255.255 10.2.4.3 10.2.4.3 1
255.255.255.255 255.255.255.255 10.3.4.3 10.3.4.3 1
255.255.255.255 255.255.255.255 172.1.1.3 172.1.1.3 1
255.255.255.255 255.255.255.255 192.168.1.1 192.168.1.1 1
255.255.255.255 255.255.255.255 1.1.1.3 1.1.1.3 1
Default Gateway: 1.1.1.1
===========================================================================
Persistent Routes:
None
2.How to configure ISA 2004 to route POP3/SMTP traffic from Outlook Express to mail servers
Dear all,
we have setup ISA 2004 sp2 as a Web Proxy (Single adaptar). It is
listening on port 8080. We are able to use this as a web proxy for
browsing internet using Internet Explorer. we have also opened all the
required ports from internal to external.
when i enable logging from monitoring window. I can see only web
traffic and no POP3/SMTP traffic. On further investigation on the
client i could see after resolving the site the client was trying to
connect directly to the mail server for accessing the mails. where as
it should have used proxy for the same. Outlook Express doesnt detect
proxy settings and go through ISA 2004 proxy server.
Please help
Sushant Thumare
3.Difference between SMTP Server and SMTP in ISA Server 2004
Hello.
What is the difference between "SMTP Server" and "SMTP"
protocols in ISA Server 2004? I notice in the firewall log that
most of the spam mail come in on "SMTP" protocol.
Can I block SMTP protocol from the outside? I think I can
only expect server-to-server SMTP connection, right?
Thanks in advance.
4.Multiple Networks, One ISA Server, Multiple Proxies?
We have two (and if we can make it work, eventually three) networks
behind an ISA 2004 server. We are using a PacketShaper to help curb
the flow of internet traffic across all of our subnets in an attempt to
give certain trusted networks a bigger piece of the bandwidth pie. The
way we were doing this was by source IP.
Traffic from network A comes through as 10.10.X.X, and traffic from
network B as 10.20.X.X. Our ISA device sits in the middle, forwarding
traffic along as 10.15.0.1. The problem we're having is that all
traffic EXCEPT port 80 web requests are being routed like we want - the
PacketShaper sees them as 10.10 or 10.20. For port 80 web requests,
the PacketShaper sees the 10.15.0.1 address of the ISA server, since
the server is proxying the request on behalf of the client, no matter
which subnet it's in.
Ideally, we would continue to *route* traffic not proxy it, so a web
request from port 10.10 would hit the PacketShaper as a web request
from 10.10, and would be cached on the way back. If that's not
possible, then it's fine if we configure the ISA to forward web
requests on two different IP addresses (10.15.0.10 and .20, for
instance), but so far I can not find any way to make this happen.
Any suggestions would be greatly appreciated!
5.Allow inbound SMTP to local SMTP server
I've just upgraded from ISA 2000 enterprise to ISA 2004 enterprise on a
W2003 server.
I run the W2003 SMTP service locally on this server to relay mail in and out
from an Exchange server to the Internet.
I can't seem to be able to create a rule that will allow SMTP inbound to the
local SMTP server.
Any tips?
Thanks
6. Multiple DMZ routing problem
7. Use VPN with multiple routes
8. routing with multiple routers and ISA 2004