Moshe Berghoff
Guest
|
Posted:
Thu Aug 04, 2005 4:30 pm Post subject:
Auto-ASX File Generation Reveals Internal Server IP address |
|
|
Environment:
ISA Server 2004, with a published server rule to internal meida server
(dedicated public IP)
Windows Server 2003 (without sp1), Windows Media Services 9.00.00.3372 with
private IP
HTTP is enabled in WMS and is using 80
When a client from the internet is directed to this URL:
http://wmserver.domain.com/mp3/001.mp3
It will receive the following play file:
[Reference]
Ref1=http://wmserver.domain.com/mp3/001.mp3?MSWMExt=.asf
Ref2=http://10.77.1.28:80/mp3/001.mp3?MSWMExt=.asf
I’ve searched high and low for a registry fix to either disable the second
Ref2=http:// or to specify a FQ DNS domain to use instead of the IP.
I’m not even sure why I would need the second Ref.
Not to poke anyone here but RealServer /ramgen does the second option nicely
in their config file, as such:
<!-- RAM File Generator -->
<List Name="RAM File Generator">
<Var ShortName="pn-ramgen"/>
<Var MountPoint="/ramgen/"/>
<Var Hostname="rmserver.domain.com"/>
</List>
I’m confident in the ISA server firewall but this is none the less a
security issue.
--
Moshe Berghoff
|
|