Hi, our company has an externally hosted website - ie, the website is hosted
by a third party away from our LAN. On our LAN we have a proxy server to
enable users to connect to the Internet, where they can then access the
company website. Most users access the Internet via the proxy but not all
(for varying reasons)

I've got an issue with users not being able to access the company website
from our LAN. The issue only affects those users who don't access the
Internet via the proxy and only affects access to the company website, ie,
all other websites can be accessed OK by these users. For the users who do
use the proxy, there isn't an issue. Why would accessing a single remote
website be an issue to those not using the proxy when those who do go via the
proxy don't experience problems? There are entries in our local DNS
referencing our external website but nothing has changed here.

When I change the settings on a client machine (that has the issue and
doesn't currently use the proxy) to access the Internet via the proxy, the
issue goes away, when I change the setting back to bypass the proxy the issue
returns.

Our LAN is a single domain called xxxxx.net, whereas our website is a
totally different address on the lines of xxxx.xxx.uk.

Not sure why this would suddenley become an issue and why it affects just
our company site, any advice would be appreciated?

Thanks
Tim

In news:E3A1B15C-6A36-4E6A-A76C-AB2995C539DD@microsoft.com,
rye-dale1 <ryedale1@discussions.microsoft.com> typed:
> Hi, our company has an externally hosted website - ie, the website is
> hosted by a third party away from our LAN. On our LAN we have a
> proxy server to enable users to connect to the Internet, where they
> can then access the company website. Most users access the Internet
> via the proxy but not all (for varying reasons)
>
> I've got an issue with users not being able to access the company
> website from our LAN. The issue only affects those users who don't
> access the Internet via the proxy and only affects access to the
> company website, ie, all other websites can be accessed OK by these
> users. For the users who do use the proxy, there isn't an issue.
> Why would accessing a single remote website be an issue to those not
> using the proxy when those who do go via the proxy don't experience
> problems? There are entries in our local DNS referencing our
> external website but nothing has changed here.
>
> When I change the settings on a client machine (that has the issue and
> doesn't currently use the proxy) to access the Internet via the
> proxy, the issue goes away, when I change the setting back to bypass
> the proxy the issue returns.
>
> Our LAN is a single domain called xxxxx.net, whereas our website is a
> totally different address on the lines of xxxx.xxx.uk.
>
> Not sure why this would suddenley become an issue and why it affects
> just our company site, any advice would be appreciated?
>
> Thanks
> Tim

How do the clients not using the proxy resolve external names? Are they only
set to use the internal DNS (as supposed to)? If so, possibly the reference
in DNS is incorrect. You may need to create the xxxx.xxx.uk and delegate www
(assuming that's how you are connecting to the site) to the nameservers on
record for the domain. The ISP that hosts it may be hosting the domain in a
webfarm of multiple IPs. If that's the case you may not have the correct
IPs. It may even be due to a CNAME that you are not aware of. You didn't
post the name, therefore we can't test it for you. Use nslookup to test it.

Based on your description of your infrastructure, I am assuming your
internal DNS server has complete access to the internet to resolve names on
it's own and the proxy is just being used as a web caching device. So my
question is if your internal domain name is totally different than the
external name, why bother hosting the zone internally and just allow DNS to
resolve the outside name on its own?


--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

Infinite Diversities in Infinite Combinations

Read inline please.

In news:E3A1B15C-6A36-4E6A-A76C-AB2995C539DD@microsoft.com,
rye-dale1 <ryedale1@discussions.microsoft.com> typed:
> Hi, our company has an externally hosted website - ie, the website is
> hosted by a third party away from our LAN. On our LAN we have a
> proxy server to enable users to connect to the Internet, where they
> can then access the company website. Most users access the Internet
> via the proxy but not all (for varying reasons)
>
> I've got an issue with users not being able to access the company
> website from our LAN. The issue only affects those users who don't
> access the Internet via the proxy and only affects access to the
> company website, ie, all other websites can be accessed OK by these
> users. For the users who do use the proxy, there isn't an issue.
> Why would accessing a single remote website be an issue to those not
> using the proxy when those who do go via the proxy don't experience
> problems? There are entries in our local DNS referencing our
> external website but nothing has changed here.
>
> When I change the settings on a client machine (that has the issue and
> doesn't currently use the proxy) to access the Internet via the
> proxy, the issue goes away, when I change the setting back to bypass
> the proxy the issue returns.
>
> Our LAN is a single domain called xxxxx.net, whereas our website is a
> totally different address on the lines of xxxx.xxx.uk.
>
> Not sure why this would suddenley become an issue and why it affects
> just our company site, any advice would be appreciated?


Do you have a Forwarder in your local DNS?

The difference being a client that uses a Proxy, a Web Browser gets its name
resolution from the Proxy Server, which bypasses the DNS Cleint service.
When the Proxy is bypassed or not used, the web browser gets its name
resolution from the DNS Client service.



--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================