RE: ISA 2004 blocking XP local loopback

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 14 Jan 2006 10:59:56 -0600

Why not just configure:

127.0.0.0-127.255.255.255 for Direct Access?

Tom

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**

 

> -----Original Message-----
> From: Young, Gerald G [mailto:Gerald.Young@xxxxxxxxxx] 
> Sent: Friday, January 13, 2006 3:06 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA 2004 blocking XP local loopback
> 
> http://www.ISAserver.org
> 
> Eric,
> 
> Here's one other thing to try.  At the command prompt, execute the
> following command:
> 
> proxycfg -p <web proxy ip:port>
> 
> If that doesn't work, use the following command to reset it:
> 
> proxycfg -d
> 
> Cordially yours,
> Jerry G. Young II
>   MCSE (4.0/W2K)
> Atlanta EES Implementation Team Lead
> HHS Engineering
> Unisys
>  
> 11493 Sunset Hills Rd.
> Reston, VA 20190
> Office: 703-579-2727
> Cell: 703-625-1468
> 
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE 
> PROPRIETARY
> MATERIAL and is thus for use only by the intended recipient. If you
> received this in error, please contact the sender and delete 
> the e-mail
> and its attachments from all computers.
> -----Original Message-----
> From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx] 
> Sent: Friday, January 13, 2006 3:53 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA 2004 blocking XP local loopback
> 
> http://www.ISAserver.org
> 
> Hmmm, here's what I get, keep in mind that everything else 
> works like it
> should.
> 
> When I type the del command I get "Could Not Find C:\*array.dll*"
> 
> After I reload the script and type the dir command I get "File Not
> Found"
> 
> Same thing if I change it to "Automatically detect proxy server" and
> type dir, I get "File Not Found".
> 
> Like I said, everything else is working as it should.  It has to be
> getting the correct script changes.  I can see the traffic change from
> one ISA to the next as I change script settings. 
> 
> 
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
> Sent: Friday, January 13, 2006 12:27 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA 2004 blocking XP local loopback
> 
> http://www.ISAserver.org
> 
> Nope - that won't work in this case. 
> 
> Eric, do you know for certain that the browser is getting the wpad
> script?
> You can tell by:
> 1. close all IE sessions
> 2. open a cmd window
> 3. type 'del \*array.dll* /s'
> 4. open IE and retry the connection
> In the cmd window type 'dir \*array.dll* /s'
> 
> ..do you see any new scripts?
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: Mark Morgan [mailto:MMorgan@xxxxxxxxxxxxxxxxxxxxx]
> Sent: Friday, January 13, 2006 12:20
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA 2004 blocking XP local loopback
> 
> http://www.ISAserver.org
> 
>  
> http://support.microsoft.com/kb/262981/?sd=RMVP
> 
> Thank You
> Mark J Morgan
> Palm Drive Hospital
> 501 Petaluma Ave. Sebastopol, Ca. 95472
> Email:    mmorgan@xxxxxxxxxxxxxxxxxxxxx
> Voice:    (707) 829-4242
> Fax:       (707) 829-4112
> Mobile    (707) 849-5576
> 
> IMPORTANT Notice: The information contained in this e-mail, including
> any attachments or other embedded messages, is legally privileged and
> confidential and is intended only for the use of the individual or
> entity to whom it is addressed. If the reader of this message 
> is not the
> intended recipient or an agent responsible for delivering it to the
> intended recipient, you are hereby notified that any viewing,
> dissemination, distribution, retransmitting, or copying of this e-mail
> message is strictly prohibited. If you have received and/or 
> are viewing
> this e-mail in error, please notify the sender immediately by reply
> e-mail, and delete this and all copies of this communication from your
> systems. Thank you.
> 
> 
> -----Original Message-----
> From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx]
> Sent: Friday, January 13, 2006 12:02 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA 2004 blocking XP local loopback
> 
> http://www.ISAserver.org
> 
> Oops, sorry.
> "Use automatic configuration script" is checked and the 
> default address
> that ISA creates is in for the address.
> Example - ISA 2004 -
> http://fchap082.cmcinet.org:8080/array.dll?Get.Routing.Script
> 
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> Sent: Friday, January 13, 2006 11:57 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA 2004 blocking XP local loopback
> 
> http://www.ISAserver.org
> 
> ..and the proxy settings? 
> 
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx]
> Sent: Friday, January 13, 2006 11:32
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA 2004 blocking XP local loopback
> 
> http://www.ISAserver.org
> 
> It's a local database that is accessed via 
> http://127.0.0.1:8080 in IE.
> _______________________________________________
> Eric Poole, CISSP
> Senior Information Security Analyst
> Community Medical Centers
> 1140 "T" Street, Fresno, California 93721
> 559-459-6784 (phone) 559-459-2045 (fax)
>  
> 
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> Sent: Friday, January 13, 2006 11:08 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA 2004 blocking XP local loopback
> 
> http://www.ISAserver.org
> 
> What is the application; IE, Firefox, etc.?
> What are the proxy settings on that app?
> 
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx]
> Sent: Friday, January 13, 2006 10:15
> To: [ISAserver.org Discussion List]
> Subject: [islist] ISA 2004 blocking XP local loopback
> 
> http://www.ISAserver.org
> 
> 
> Ok, I've been looking for the answer to this for about 45min. 
>  Why would
> ISA 2004 block a workstation from getting to 127.0.0.1?  Same
> workstation going through ISA 2000 is able to access it's local
> loopback.  Someone enlighten me please!
> 
> _______________________________________________
> Eric Poole, CISSP
> Senior Information Security Analyst
> Community Medical Centers <http://communitymedical.org/> 1140 "T"
> Street, Fresno, California 93721
> 559-459-6784 (phone) 559-459-2045 (fax) 
> 
> 
> -------------------------------------------------------
> WARNING/CONFIDENTIAL: 
> -------------------------------------------------------
> This email, including attachments, may contain information that is
> privileged, confidential, and/or exempt from disclosure under 
> applicable
> law (including, but not limited to, protected health 
> information). It is
> not intended for transmission to, or receipt by, any unauthorized
> persons. If the reader of this message is not the intended 
> recipient you
> are hereby notified that any dissemination, distribution or copying of
> this communication is strictly prohibited. If you believe 
> this email was
> sent to you in error, do not read it. Reply to the sender 
> informing them
> of the error and then destroy all copies and attachments of 
> the message
> from your system. Thank you.
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> All mail to and from this domain is GFI-scanned.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> epoole@xxxxxxxxxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> -------------------------------------------------------
> WARNING/CONFIDENTIAL: 
> -------------------------------------------------------
> This email, including attachments, may contain information that is
> privileged, confidential, and/or exempt from disclosure under 
> applicable
> law (including, but not limited to, protected health information).  It
> is not intended for transmission to, or receipt by, any unauthorized
> persons.  If the reader of this message is not the intended recipient
> you are hereby notified that any dissemination, distribution 
> or copying
> of this communication is strictly prohibited.  If you believe 
> this email
> was sent to you in error, do not read it.   Reply to the sender
> informing them of the error and then destroy all copies and 
> attachments
> of the message from your system.   Thank you.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> All mail to and from this domain is GFI-scanned.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> epoole@xxxxxxxxxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> -------------------------------------------------------
> WARNING/CONFIDENTIAL: 
> -------------------------------------------------------
> This email, including attachments, may contain information that is
> privileged, confidential, and/or exempt from disclosure under 
> applicable
> law (including, but not limited to, protected health information).  It
> is not intended for transmission to, or receipt by, any unauthorized
> persons.  If the reader of this message is not the intended recipient
> you are hereby notified that any dissemination, distribution 
> or copying
> of this communication is strictly prohibited.  If you believe 
> this email
> was sent to you in error, do not read it.   Reply to the sender
> informing them of the error and then destroy all copies and 
> attachments
> of the message from your system.   Thank you.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> mmorgan@xxxxxxxxxxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> --
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.371 / Virus Database: 267.14.17/228 - Release Date:
> 01/12/2006
>  
> 
> --
> No virus found in this outgoing message.
> Checked by AVG Free Edition.
> Version: 7.1.371 / Virus Database: 267.14.17/228 - Release Date:
> 01/12/2006
>  
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> All mail to and from this domain is GFI-scanned.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> epoole@xxxxxxxxxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> -------------------------------------------------------
> WARNING/CONFIDENTIAL: 
> -------------------------------------------------------
> This email, including attachments, may contain information that is
> privileged, confidential, and/or exempt from disclosure under 
> applicable
> law (including, but not limited to, protected health information).  It
> is not intended for transmission to, or receipt by, any unauthorized
> persons.  If the reader of this message is not the intended recipient
> you are hereby notified that any dissemination, distribution 
> or copying
> of this communication is strictly prohibited.  If you believe 
> this email
> was sent to you in error, do not read it.   Reply to the sender
> informing them of the error and then destroy all copies and 
> attachments
> of the message from your system.   Thank you.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> gerald.young@xxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 


Other related posts: