RE: ISA 2004 blocking XP local loopback

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 14 Jan 2006 09:11:22 -0800

IE still uses WinInet and proxycfg only affects WinHTTP.
That commands while useful for WinHTTP-based clients (BITS, OL2K3, etc.)
and is completely useless for IE-based connections.

--------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
--------------------------------------------

-----Original Message-----
From: Young, Gerald G [mailto:Gerald.Young@xxxxxxxxxx] 
Sent: Friday, January 13, 2006 1:06 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org

Eric,

Here's one other thing to try.  At the command prompt, execute the
following command:

proxycfg -p <web proxy ip:port>

If that doesn't work, use the following command to reset it:

proxycfg -d

Cordially yours,
Jerry G. Young II
  MCSE (4.0/W2K)
Atlanta EES Implementation Team Lead
HHS Engineering
Unisys
 
11493 Sunset Hills Rd.
Reston, VA 20190
Office: 703-579-2727
Cell: 703-625-1468

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.
-----Original Message-----
From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx] 
Sent: Friday, January 13, 2006 3:53 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org

Hmmm, here's what I get, keep in mind that everything else works like it
should.

When I type the del command I get "Could Not Find C:\*array.dll*"

After I reload the script and type the dir command I get "File Not
Found"

Same thing if I change it to "Automatically detect proxy server" and
type dir, I get "File Not Found".

Like I said, everything else is working as it should.  It has to be
getting the correct script changes.  I can see the traffic change from
one ISA to the next as I change script settings. 


-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Friday, January 13, 2006 12:27 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org

Nope - that won't work in this case. 

Eric, do you know for certain that the browser is getting the wpad
script?
You can tell by:
1. close all IE sessions
2. open a cmd window
3. type 'del \*array.dll* /s'
4. open IE and retry the connection
In the cmd window type 'dir \*array.dll* /s'

..do you see any new scripts?
-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Mark Morgan [mailto:MMorgan@xxxxxxxxxxxxxxxxxxxxx]
Sent: Friday, January 13, 2006 12:20
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org

 
http://support.microsoft.com/kb/262981/?sd=RMVP

Thank You
Mark J Morgan
Palm Drive Hospital
501 Petaluma Ave. Sebastopol, Ca. 95472
Email:    mmorgan@xxxxxxxxxxxxxxxxxxxxx
Voice:    (707) 829-4242
Fax:       (707) 829-4112
Mobile    (707) 849-5576

IMPORTANT Notice: The information contained in this e-mail, including
any attachments or other embedded messages, is legally privileged and
confidential and is intended only for the use of the individual or
entity to whom it is addressed. If the reader of this message is not the
intended recipient or an agent responsible for delivering it to the
intended recipient, you are hereby notified that any viewing,
dissemination, distribution, retransmitting, or copying of this e-mail
message is strictly prohibited. If you have received and/or are viewing
this e-mail in error, please notify the sender immediately by reply
e-mail, and delete this and all copies of this communication from your
systems. Thank you.


-----Original Message-----
From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx]
Sent: Friday, January 13, 2006 12:02 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org

Oops, sorry.
"Use automatic configuration script" is checked and the default address
that ISA creates is in for the address.
Example - ISA 2004 -
http://fchap082.cmcinet.org:8080/array.dll?Get.Routing.Script

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Friday, January 13, 2006 11:57 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org

..and the proxy settings? 


-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx]
Sent: Friday, January 13, 2006 11:32
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org

It's a local database that is accessed via http://127.0.0.1:8080 in IE.
_______________________________________________
Eric Poole, CISSP
Senior Information Security Analyst
Community Medical Centers
1140 "T" Street, Fresno, California 93721
559-459-6784 (phone) 559-459-2045 (fax)
 

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Friday, January 13, 2006 11:08 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org

What is the application; IE, Firefox, etc.?
What are the proxy settings on that app?


-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx]
Sent: Friday, January 13, 2006 10:15
To: [ISAserver.org Discussion List]
Subject: [islist] ISA 2004 blocking XP local loopback

http://www.ISAserver.org


Ok, I've been looking for the answer to this for about 45min.  Why would
ISA 2004 block a workstation from getting to 127.0.0.1?  Same
workstation going through ISA 2000 is able to access it's local
loopback.  Someone enlighten me please!

_______________________________________________
Eric Poole, CISSP
Senior Information Security Analyst
Community Medical Centers <http://communitymedical.org/> 1140 "T"
Street, Fresno, California 93721
559-459-6784 (phone) 559-459-2045 (fax) 




All mail to and from this domain is GFI-scanned.



Other related posts: