Yes, there is more data. What's the URL in the ISA logs? What rule is quoted for the 403 response? They use IP-access controls?!? <snicker><chortle><chuckle><GUFFAW> Yeh -that's the ticket - everybody behind your ISA is now seen as a single-freakin'-user! ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] Sent: Friday, October 28, 2005 10:30 To: [ISAserver.org Discussion List] Subject: [isalist] Complex URLs? http://www.ISAserver.org Can someone please help me with this? We've been struggling with getting access to some state databases for a couple of months now, but have been unsuccessful. I've checked the ISA logs, and all I see is an HTTP GET request going out, and the response is a 403 Forbidden. There are no other packets to analyze... Finally, we got a response from their tech center, only by chance, in the e-mail forwarding shuffle. Here is what they said: --------------------------------- Can you check with the library that is trying to connect to see if they are behind a firewall that might be limiting their access? The following are the lines from the error log where the IP you sent tried to access the GRGM resource: 1012101716:23196:28201:GET /itweb/lom_accessmich?db=GRGM:24.213.58.250:80:web:pu blic:0:1 1012101727:23196:28308:GET /ips/start.do?userGroupName=lom_accessmich&prodId=IPS &DB=SPN.SP01_SPN.SP02_HRCA_GRGM_CDB_EAIM_GBFM_ITOF_LT_STOJ_STOM_SPJ.SP05 _GVRL-0: 24.213.58.250:80:web:public:0:1 --------------------------------- The strange part is that I see nothing in our logs about these URLs. They are using a new "gateway" system now, where it checks your IP against their list. If your IP is authorized, they let you through, if it isn't on the list, it is supposed to prompt you for your drivers license number instead. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.