HTML emails not displaying images through ISA

Michael Erlach

unread,

Aug 8, 2003, 2:23:17 PM8/8/03

to

Hello,

We are having an issue viewing HTML emails on clients
that are configured to go through ISA Server. We are a
Lotus Notes shop (sorry, not my choice) and we use ISA
server for web access. We use Surf Control for our web
site filtering, but use ISA rules for IM access
restrictions.

Does anyone have a solution to this problem? I'm rather
new to ISA Server, so be gentle.

Thanks in advance!

Jim Harrison [MSFT]

unread,

Aug 8, 2003, 5:17:16 PM8/8/03

to

What is the error the clients see?
What do you find in the WEBEXT..logs for those requests?

--
Jim Harrison [ISAQFE]
Read the help, books and articles!

This posting is provided "AS IS" with no warranties, and confers no rights.

"Michael Erlach" <michael...@jafra.com> wrote in message
news:02ee01c35dda$236d3880$a101...@phx.gbl...

michael erlach

unread,

Aug 10, 2003, 4:42:52 PM8/10/03

to

Notes will display an error message on bottom
saying "Image or Object not found on server", and all the
images have a red X.

Here's what I found in the log,

192.168.1.1 merlach Mozilla/4.0 (compatible; Lotus-
Notes/6.0; Windows-NT) 2003-08-10 20:23:14
SERVERNAME - - - - -
637 - - GET
http://a248.e.akamai.net/f/248/1791/v001/image.col
dwatercreek.com/promo/CJul05-
03BI/http://a248.e.akamai.net/f/248/1791/v001/image.coldwa
tercreek.com/promo/CJun25-03I/spacer.gif -
12202
192.168.1.1 merlach Mozilla/4.0 (compatible; Lotus-
Notes/6.0; Windows-NT) 2003-08-10 20:23:14
SERVERNAME - - - - -
553 - - GET
http://a248.e.akamai.net/f/248/1791/v001/image.col
dwatercreek.com/promo/CJul08-03CI/40off.gif -
12202

I was able to paste the URL in the browswer and they
deliver the images. If I disable the firewall client,
and point directly out our Checkpoint firewall, I am able
to see the images.

I have the Outbound Web Requests set to Integrated
Authentication. I toyed around with those settings, but
can't seem to get anything to work.

Thanks again.

>.
>

Jim Harrison [MSFT]

unread,

Aug 10, 2003, 6:52:02 PM8/10/03

to

The sc-result code in those log entries is "12202".
This indicates either:
1. a "deny" rule blocked this request
2. no "allow" rule exists for this request in the face of other deny rules

Add "Rule#1" and "Rule#2" to the web proxy logs and retry the request.

Also, the FW client won't help you, unless you set the HTTP Redirector to
"send to requested web server", but that'll bypass SurfControl.

--
Jim Harrison [ISAQFE]
Read the help, books and articles!

This posting is provided "AS IS" with no warranties, and confers no rights.

"michael erlach" <michael...@jafra.com> wrote in message
news:03b801c35f7f$f8094bf0$a001...@phx.gbl...

michael erlach

unread,

Aug 11, 2003, 2:25:23 PM8/11/03

to

OK, I know that I don't have a deny rule in against
this. I also have the default "always allow everyone to
all destinations & all content" rule in place. I do have
other rules tied to the domain user accounts, but mainly
just to block IM & limit a certain group to a a few
websites.

I can view the images if I copy the URL to internet
explorer, so it has to be an issue with the method that
notes is requesting the images from ISA....right?

>.
>