RE: [fw-wiz] PIX and IIS issue

From: Sloane, David (DSloane_at_vfa.com)
Date: 05/01/03

  • Next message: Mohammad Shahed Akhtar: "Re: [fw-wiz] PIX and IIS issue" 
    To: firewall-wizards@honor.icsalabs.com
Date: Thu, 1 May 2003 12:20:20 -0400

    If your IIS box isn't listening on an outside-facing interface, that could
    be a problem. Also, it may have a host-header which works inside --
    http://servername -- but not outside -- http://webthing.somepurpose.com.

    I'd focus on the IIS box though - the firewall doesn't seem to be part of
    the problem.

    -David

    -----Original Message-----
    From: Ames, Neil [mailto:NAmes@anteon.com]
    Sent: Thursday, May 01, 2003 10:17 AM
    To: Mohammad Shahed Akhtar; firewall-wizards@honor.icsalabs.com
    Subject: RE: [fw-wiz] PIX and IIS issue

    Shahed,
            Are you saying that your Web server on the Linux box works fine,
    with no changes to the PIX, where the Windows IIS server doesn't (using the
    same IP)? Is the IIS server configured to use an IP address other than "All
    Assigned" (in the Web site properties)? Just a guess, but you may have some
    other IP address configured there (if I read this right)...

    --Fritz

    -----Original Message-----
    From: Mohammad Shahed Akhtar [mailto:msakhtar@kfupm.edu.sa]
    Sent: Wednesday, April 30, 2003 6:27 PM
    To: firewall-wizards@honor.icsalabs.com
    Subject: [fw-wiz] PIX and IIS issue

    Hi!

    I have a PIX connected to a switch on internal network and therein resides
    my Microsoft IIS box. I can access ftp, ping etc from outside through
    conduit and/or access lists but I cannot access http port from outside ?
    Tried all clears - conduit, xlate, arp etc without any effect. Finally
    thought that its nothing to do with the poor PIX and worked on the web
    server. Replaced the IIS box with Linux and lo! it works fine.. I mean all
    access lists and/or conduits for http, ftp, ping work fine. Now why doesn't
    the same work with Microsoft IIS? The same Microsoft IIS works great with
    all ports accessible on the internal network but inbound access for http
    port from across the firewall through the outside interface is not working.
    Any thoughts as to what's the issue? Is there a bug here?

    Will virtual + aaa combo help here ?

    BTW: PIX version 6.1(4) and IIS version 5.0+

    Thanks in advance,
    Shahed.

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Mohammad Shahed Akhtar: "Re: [fw-wiz] PIX and IIS issue"

    Relevant Pages

    • Re: Experts Only reply..Very risky security question..Experts invited
      ... multi-tiered firewall, but that is something you can address in the future. ... Lock down Windows, IIS, and the PIX and you'll be OK. ... > Yeah I will be in the future clustering the web servers + I will also be ...
      (microsoft.public.windows.server.security)
    • Re: [fw-wiz] PIX and IIS issue
      ... Yes the web server on the Linux box works fine, with no changes to the PIX ... and yes the IIS box doesnot. ...
      (Firewall-Wizards)
    • Re: Remote Desktop web connection does not work outside my local N
      ... The web based method, using IIS, still requires you to port forward the RDP protocol to each PC ... > screen opens with the external ip of my router on the title. ... But I cant connect to any other machine on my network even ...
      (microsoft.public.windowsxp.work_remotely)
    • Re: Win2003 Upgrade Broke SSL?
      ... there WAS a single process using port 443. ... management software was starting before the IIS would start, ... > The reason I say that the upgrade did not break SSL is because IIS has no ... > anything to do with IIS nor general upgrading process of the OS, ...
      (microsoft.public.inetserver.iis)
    • Re: Save As saves link to WMV instead of video file
      ... for IIS HTTP to WMS HTTP on the same IP address. ... Both services cannot share the same port and IP address ... or to every playlist (WMS) for that to work - a world of pain. ...
      (microsoft.public.windowsmedia.server)