A Proxy Chain Error Message "12206" Is Displayed (296202)



The information in this article applies to:

  • Microsoft Internet Security and Acceleration Server 2000

This article was previously published under Q296202

SYMPTOMS

When your Web browser attempts to locate a Web site that has been published by Internet Security and Acceleration (ISA) Server, you may receive a "12206" proxy chain error message.

CAUSE

This behavior can occur because the external network adapter references an Internet service provider (ISP) Domain Name System (DNS) server and the binding order on ISA Server lists the external network adapter first. When the publishing server is redirected by a Fully Qualified Name and the zone of the server matches the zone located on the external DNS server, the external DNS server is used to resolve the name. The external DNS server redirects the traffic back to the external network adapter on ISA Server. Each time the traffic arrives at ISA Server, an "HTTP Via" record is added to the packet. When two of these records exist, ISA Server returns the 12206 error message.

NOTE: This behavior can occur even when there is only one ISA Server that publishes the Web site.

RESOLUTION

To resolve this behavior, remove the external DNS server address from the external network adapter, and then change the binding order on ISA Server so that the internal network adapter is listed first:
  1. Click Network and Dial-Up connections.
  2. On the Advanced menu, click Advanced Settings to display the binding order.
  3. Click the internal network adapter, and then move it to the top. The internal DNS is used to resolve the server name so that redirection works properly.

Modification Type:MinorLast Reviewed:1/15/2006
Keywords:Kbisa2004yes kbDNS kbprb KB296202