Re: ISA and MDaemon
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 19 Feb 2002 12:48:03 -0800
The "applies to" is really just that simple.
You can make the filter or rule "apply to" client address sets (collections
of IP addresses) or user / groups, or in the case of packet filter, specific
IP addresses..
It helps you really fine-tune ISA access rules.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!
----- Original Message -----
From: "Dennis V. Kleymeonov" <klim@xxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, February 19, 2002 07:24
Subject: [isalist] Re: ISA and MDaemon
http://www.ISAserver.org
Hello Jim,
Thanks Jim!
I'll try this.
Ona more question... It's hard to me (os I'm just dumb?) to understand
"This filter applies to" thing... What should be there if I want to
apply things described in that rule to my office computers?
Tuesday, February 19, 2002, 17:39:10, you wrote:
JH> http://www.ISAserver.org
JH> Hi Dennis,
JH> 1. Protocol rules shouldn't include the "Server" variations; they don't
help
JH> 2. The packet filters should look something like:
JH> "SMTP"
JH> TCP
JH> Outbound
JH> remote port 25
JH> local port any
JH> "POP3"
JH> TCP
JH> Outbound
JH> remote port 110
JH> local port any
JH> "DNS Q"
JH> UDP
JH> Send-Receive
JH> remote port 53
JH> local port any
JH> ..not sure what the "1080" port is for; though it's usually either a web
JH> proxy or SOCKS.
JH> Jim Harrison
--
Best regards,
Dennis V. Kleymeonov
System administrator
Skytec Agency, Moscow, Russia
9 (bldg. 1), Pluschiha str., Moscow, Russia, 119121
Tel.: (7095) 248-2931, (7095) 248-3754 Fax: (7095) 248-3754
mailto:klim@xxxxxxxxx
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
