Exception list problem in internet explorer

[Guest]

Hi,
(I am sorry for asking this under the Topic of "Windows XP General". I
hadn't been able to find this topic.)
I have two networks (N1=10.0.0.0/16 and N2=192.168.4.0/24) and
use ISA server as a proxy in N1. Also I have web based application servers
in N1. Two networks use proxy server to go to internet.
I added the FQDN of my web based aplication servers in the exeception list
of internet explorer and checked the option of "bypass proxy server for local
address".
there is no problem in N1, but users in N2 always go to proxy server
whenever they want to go to my web based application servers. they can't
bypass proxy server.
Here the exeception list seems not to work.
Can anybody give an explnation?
Thanks in advance.
AliKemal.
tunca.

 

[Robert Aldwinckle]

(cross-post added to XP Networking)

Hi,
(I am sorry for asking this under the Topic of "Windows XP General". I
hadn't been able to find this topic.)
I have two networks (N1=10.0.0.0/16 and N2=192.168.4.0/24) and
use ISA server as a proxy in N1. Also I have web based application servers
in N1. Two networks use proxy server to go to internet.
I added the FQDN of my web based aplication servers in the exeception list
of internet explorer and checked the option of "bypass proxy server for local
address".
there is no problem in N1, but users in N2 always go to proxy server
whenever they want to go to my web based application servers. they can't
bypass proxy server.
Here the exeception list seems not to work.
Can anybody give an explnation?

N2 is your Intranet? And proxy server is only way to Internet?
Then N2 users can't bypass proxy server because there is no
other way to get to the Internet (or you haven't told us if there is.)

I'm not sure but I think that this is going to be an exercise in routing.
E.g. in a cmd window enter:

netstat -r

for each case and see if there is a path to the web application
which can bypass the proxy server.

Thanks in advance.
AliKemal.
tunca.

I think you were closer with your first guess of XP General. ; )
Try XP Networking instead. Cross-post added for your convenience.


Good luck

Robert Aldwinckle
---

 

[Guest]

(cross-post added to XP Networking)



N2 is your Intranet? And proxy server is only way to Internet?
Then N2 users can't bypass proxy server because there is no
other way to get to the Internet (or you haven't told us if there is.)

I'm not sure but I think that this is going to be an exercise in routing.
E.g. in a cmd window enter:

netstat -r

for each case and see if there is a path to the web application
which can bypass the proxy server.




I think you were closer with your first guess of XP General. ; )
Try XP Networking instead. Cross-post added for your convenience.


Good luck

Robert Aldwinckle

**********************************
This case is related to internet explorer behaviour.
1) N1=10.0.0.0/16 is my center office.
2) All servers (also proxy server ISA and my web based application server)
are in N1
3) N2=192.168.4.0/24 is my branch office connected to the center office by
2 Mb/s.
4) So all users in N1 and N2 use ISA to go to internet by means of proxy
setting in IE.
5)users in N2 and N1 use my servers in N1. they access to my applications
via IE.
6) Here, I don 't want users to go to ISA when accessing to my web based
applications by IE. So for this, I added an description "10.0.*.*" into
exception list in IE .
7) when I used "netstat 2" in command prompt, I saw the active connections
made to ISA when trying to access a web server (for example 10.0.2.35) in
N1. I think that I should see only the local web server address. because this
local requests shouldn't go to ISA, this is unnecessary.
8) Did I do something wrong or doesn't the exception list work well.

Thanks,
Ali Kemal.

 

[Robert Aldwinckle]

....

:

7) when I used "netstat 2" in command prompt, I saw the active connections
made to ISA when trying to access a web server (for example 10.0.2.35) in
N1. I think that I should see only the local web server address. because this
local requests shouldn't go to ISA, this is unnecessary.

You have misread and misinterpreted the switch I suggested.
Please use copy and paste if necessary.
I was trying to get you to look at the routing tables
for both cases. Another way to see them is to use

route print

More importantly I'm still not clear where the web app is,
especially relative to N2 users which was what this point was about.
E.g. when your N1 users open it presumably they would see it
in the Intranet zone (Local address). How do N2 users see it?
E.g. if they see it in the Internet zone I think that would be consistent
with them getting it through the proxy server.

This case is related to internet explorer behaviour.

That may be but it clearly requires expertise in networking and
probably even knowledge about ISA. The other groups are far more
likely to have the necessary common knowledge about IE than it's
likely you will find someone here who knows enough about the rest.
Suffice it to say that this topic has never come up in this newsgroup
before AFAIK.


HTH

Robert
---

 

[Guest]

This looks familiar to me, but I have not found a solution yet. You may wish
to look here http://support.microsoft.com/kb/303650/en-us and there is almost
too much info here... http://support.microsoft.com/kb/832161 Good Luck..

 

[Guest]

Firstly, thanks for your help.

I solved the problem for the site.
They had made a configuration on the site router in order to redirect
the http protocols to a squid proxy server in their site. And this proxy
redirection on
the router didn 't work correctly. So I wrote an access list line denying
internal http
traffic not to send to the squid proxy on the site router. Thus, that's
solved for the site now.

That's the system was ok for the port 8080 traffic but there was a problem
for the port 80
traffic because of the wrong configuration on the router.

Thanks again.
Ali Kemal.