RE: ISA server cannot connect to Internet

I know this is simple but I didn't see it mentioned, after installing and un-installing the firewall client may have modified the proxy settings...have you verified that the proxy settings are correct?

Kian


From: "Amy Babinchak" <Amy@xxxxxxxxxxxxxxxxxxxxxxxxxx>
Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Subject: [isalist] RE: ISA server cannot connect to Internet
Date: Tue, 16 Sep 2003 08:57:50 -0400

http://www.ISAserver.org


Troy,

The problem is most likely that the Firewall client is installed. Go
through and make sure that it is uninstalled for each user, then change
the permissions on that folder so that they can't install it again on
you. Truth be told if you simply disable it, you should be back in
business. Just remember to look at each user. With Terminal server and
admin rights it probably got installed for everyone.

I've got a client with a Citrix server and have problems with users
installing stuff all the time. Unfortunately one of the apps prevents me
from settings the rights to prevent this. But hey, you go with what you
got to work with and do the best you can for the client.

Amy


-----Original Message----- From: Troy Armour [mailto:troy@xxxxxxxxxx] Sent: Tuesday, September 16, 2003 8:50 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA server cannot connect to Internet

http://www.ISAserver.org


what are we debating what this site has now???? they do use a firewall-they have a small 3com dial-up router and 3com firewall from the officeconnect family-(they have norton antivirus too incase i forget to mention that-maybe if i forget to say they are sitting on chairs next you'll ASSUME they're standing) and it works well for them-the only stupid thing from my part is their ability to install software-but the boss wants and demands his login be Administrator-he pays my fees-there are no remote users-all (10) are in the one building using compaq evo t20 terminals-the question still remains.....does anyone know what the the solution to the problem is-is the problem the fact they installed the client or is it unrelated.

is this list for people who know the answers to everything or to help
ones
who might get stuck now and again...

troy




----- Original Message ----- From: "Steve Moffat" <steve@xxxxxxxxxxxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Tuesday, September 16, 2003 1:04 PM Subject: [isalist] RE: ISA server cannot connect to Internet


http://www.ISAserver.org


Hi Troy


You said it was a terminal server, you said nothing about exchange, it's the fact that a firewall is running on a Terminal Services box, which is very stupid. If as you say remote users are using the isa box to surf the net, they get a virus or a worm from some page that they visit, voila that's the firewall compromised and their who;e network has been compromised. It doesn't matter if it's a dial up or not. Your saying in effect that this company doesn't have a firewall at all. That is very stupid.

Also the firewall client should never be  installed on the isa server.
Permissions should be set on the folder in order that no-one can get
access to it.

Is isa a multiple kernel application, I wouldn't have thought so.


-----Original Message----- From: Troy Armour [mailto:troy@xxxxxxxxxx] Sent: Tuesday, September 16, 2003 7:58 AM To: Isa Weblist

http://www.ISAserver.org


thanks greg for the input but the ISA in question is just used as a proxy server on a dial-up connection and thats its primary function not as a firewall. steve jumped to conclusions. it seems that the clients aren't seeing the proxy server at all. if i log in as the Administrator on any terminal i can go online with no problem-but when i log in as a user the browser does the following: in the status bar i see it looking for www.msn.com then in returns the IP address of the site-it then sits at this-after a long time out period i get a DNS error on the page. i know its not a DNS error-the DNS is passing simple and recursive testing and the Administrator user has no DNS problems. all DNS settings are correct-i'm confident of that. my feeling is that when the user installed the firewall client it must've made entries in the registry that didn't get removed on the uninstall. have you any ideas on what these could be? its bugging me at this stage.....

thanks

troy

----- Original Message -----
From: "Greg Mulholland" <gmulholland@xxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, September 16, 2003 10:41 AM
Subject: [isalist] RE: ISA server cannot connect to Internet


> http://www.ISAserver.org > > > > This is a multi-part message in MIME format. >


------------------------------------------------------------------------ ---- ----


I think the point was more that it shouldn't be done on the firewall. In most cases you should be able to scrounge enough money together for a Pentium and install some sort of firewall, even if it is Linux. Then put all the goodies (SBS, ISA, EX) etc behind it not on it.

More to the point i spose, where is the web traffic breaking down? How
far
do you get, is it a DNS error or is it ip related. Did you restart the
server at all, what does the error message say as well as the firewall
logs.

Greg

________________________________

From: Troy Armour [mailto:troy@xxxxxxxxxx]
Sent: Tue 9/16/2003 6:46 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA server cannot connect to Internet


http://www.ISAserver.org


I didn't ask for a debate on the what should or shoudl not be done?

But its the small business server server-so you're telling me then when
i
install the server i cant install exchange because i'm installing the
ISA
option-hmmmm? funny one that really when it all comes bundled together
as it
does?  anyways i didn't really ask to be ridiculed. SBS is designed for
this
sort of setup-this company doesn't have the budget to put 2 servers
in-then
they couldn't run SBS anyway. they have 10 users-and some of them have
to
have install rights as thats just the way it goes in 2 office companys.

can someone just answer the question if they have any ideas-i haven't
seen
this problem before.

thanks

troy

----- Original Message -----
From: Steve Moffat <mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx>
To: [ISAserver.org Discussion List] <mailto:isalist@xxxxxxxxxxxxx>
Sent: Monday, September 15, 2003 10:32 PM
Subject: [isalist] RE: ISA server cannot connect to Internet

http://www.ISAserver.org


You are kidding, Terminal Server on a firewall????....lol...heard everything now. Not even locked down so clients can install their own software....rotflol

Uninstall ISA, get separate hardware and reinstall it. NOTHING should be
installed on a firewall.

Steve


________________________________

From: Troy Armour [mailto:troy@xxxxxxxxxx]
Sent: Monday, September 15, 2003 3:26 PM
To: Isa Weblist


http://www.ISAserver.org


hi everyone

just popped over from exchange list with a wee ISA query. i have a
company
that use ISA server sitting on windows 2000 terminal services. only the
administrator can go online from a a terminal. everything was working
fine
up until a week ago then all stopped-i did notice that one of the users
had
installed the firewall client on his terminal session-i remember reading
somewhere that this is never to be done. what i get now is when a user
tries
to access a web page he/she gets finding www.website.com then the IP
address
and then nothing-and the error returned is not an ISA server error. i'm
not
new to this but his has me stumped. i've all the usual settings
correct-but
i'm obviously missing something-i uninstalled the firewall client incase
it
was that but still no joy-id appreciate anyone shedding some light.....

a frustrated irish paddy


------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: steve@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') --------------------------------------- --------------- List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: troy@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')


________________________________

This E-Mail is confidential. It is not intended to be read, copied,
disclosed or used by any person other than the recipient named above.





Unauthorised use, disclosure, or copying is strictly prohibited and may
be
unlawful. Optimum IT Solutions disclaims any liability for any action
taken
in connection of this E-Mail. The comments or statements expressed in
this
E-Mail are not necessarily those of Optimum IT Solutions or its
subsidiaries
or affiliates.

administrator@xxxxxxxxxxxxxxxxxxxxxxxxxx
<mailto:administrator@xxxxxxxxxxxxxxxxxxxxxxxxxx>
________________________________






------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------------------------
----
----


> ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: troy@xxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub') >


------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: steve@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
troy@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: amy@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: kiandavis@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

_________________________________________________________________
Express yourself with MSN Messenger 6.0 -- download now! http://www.msnmessenger-download.com/tracking/reach_general




Other related posts: