RE: Javascript through ISA 2004...
- From: "Steve Moffat" <steve@xxxxxxxxxx>
- To: "ISA Mailing List" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 24 Feb 2005 18:09:12 -0400
I have found that only GFI offer add on products for ISA that work as
advertised.
S
-----Original Message-----
From: Ted D [mailto:tdoholis@xxxxxxxxxxxxx]
Sent: Thursday, February 24, 2005 6:15 PM
To: ISA Mailing List
Subject: [isalist] RE: Javascript through ISA 2004...
http://www.ISAserver.org
Hi Tom,
I thought I would post a reply to this thread as somebody else must be
having this same issue. After working through all of this trouble with
Tom I was still getting unreliable results.
Then the real trouble started.
Mail not going out, cant download anything, cant open any window with a
popup,firewall service crashing, MIME extensions seemingly not
registered etc etc etc.
I ended up removing the McAffee anti virus for ISA 2004 and EVERY SINGLE
PROBLEM WENT AWAY. I have had the case escalated to the development team
at NAI and they have been working on issuing a major patch for it....
Makes you wonder how this got to market??
> Hi Ted,
>
> Good news. If configured as Web proxy client. All Web requests that
> use the Web proxy client config will be used first, unless excluded by
> the Direct Access list.
>
> HTH,
> Tom=20
>
> -----Original Message-----
> From: Ted Doholis [mailto:tdoholis@xxxxxxxxxxxxx]=20
> Sent: Tuesday, February 22, 2005 6:34 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Javascript through ISA 2004...
>
> http://www.ISAserver.org
>
> Thanks a lot for this Tom. I have one more question though.=20
>
> Is there a hierarchy or order of use then? Ie does the client first
> try the FWC and then web proxy then secure nat.=20
>
> I understand that if the web proxy filter is unbound from the HTTP
> protocol and you are using the FWC, you can not make use of the cache.
> If this is the case and I implement the solution below and the FWC is
> the first choice for connections, then I will not be using the cache
> for nearly all traffic except for those that make use of the web proxy
> client type.
>
> I guess the short of it is, if the computers with all 3 connection
> types use the web proxy client type first, then I'm ok.=20
>
> Ted=20
>
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> Sent: Tuesday, February 22, 2005 7:20 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Javascript through ISA 2004...
>
> http://www.ISAserver.org
>
> Hi Ted,
>
> That's correct. The Web proxy filter enables SecureNAT and Firewall
> clients to benefit form the Web proxy component of the ISA firewall.
> The Web proxy component is still enabled through, since we didn't
> disable the filter, we just unbound it from the HTTP protocol.
>
> So, connections sent directly from Web proxy clients to the Web proxy
> listener will always be sent to the Web proxy filter, since they are
> directly "remoted" from the Web proxy client to the listener.
>
> In contrast, the connections from the SecureNAT and Firewall client
> machines will not be passed to the filter, because we unhooked it from
> the HTTP protocol. You can use the same principles for other protocols
> that are assocated with an app filter if you ever need to.
>
> The only time when the Web proxy clients will not use the Web proxy
> filter is when you've configured sites for Direct Access and the Web
> proxy clients are configured to autodiscover or are otherwise assigned
> the autoconfig script. The script tells them "hey, Ted says not to act
> as a Web proxy client when we go to these sites" and the Web proxy
> component disavows any responsibly for the connection to a site on the
> Direct Access list.
>
> At this point, the only options left are to leveage some other method
> to connect to the site. If the machine is also configured as a
> Firewall client, then the machine will leverage its Firewall client
> config, without being exposed to the Web proxy filter. The nice thing
> about this is that you can still authenticate your outgoing requests
> to the Direct Access sites.=20
>
> If the client is not confiugred as a Firewall client, then it will
> have to hope it can depend on a SecureNAT config to sent the request.
>
> HTH,
> Tom=20
>
> -----Original Message-----
> From: Ted Doholis [mailto:tdoholis@xxxxxxxxxxxxx]
> Sent: Tuesday, February 22, 2005 6:11 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Javascript through ISA 2004...
>
> http://www.ISAserver.org
>
>
> So if I understand correctly, if I unbind the web proxy filter from
> the HTTP protocol, the FWC will not use it for connections but the web
> proxy clients will unless the direct access rule is invoked?
>
> Ted=20
>
> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> Sent: Tuesday, February 22, 2005 7:05 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Javascript through ISA 2004...
>
> http://www.ISAserver.org
>
> Hi Ted,
>
> No! Not true. Web proxy clients will always use the Web proxy filter
> unless you exclude sites using Direct Access.
>
> That's why you should always configure clients as Web proxy clients
> and Firewall clients (server's in general aren't clients, so you don't
> install the Firewall client on them).
>
> HHT<
> Tom=20
>
> -----Original Message-----
> From: Ted D [mailto:tdoholis@xxxxxxxxxxxxx]
> Sent: Tuesday, February 22, 2005 2:05 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Javascript through ISA 2004...
>
> http://www.ISAserver.org
>
> Hi Tom,=20
>
> Thanks for the explanation. This is an extremely drastic move (remove
> the web proxy filter) from the HTTP protocol! It works but isnt there
> a way to exclude it for certain connections or something? this
> solution basically lobotomizes ISA and its features....
>
> Thanks
> TD
>
> > Hi Ted,
> >=20
> > My bad. :)
> >=20
> > That's the part of the Direct Access piece you need to do to make
> >sure
>
> > you completely bypass the Web proxy.=3D20 =20 Direct Access
> >configuration is aimed at completely bypassing the Web=20 proxy. The
> >autoconfig script informs the Web proxy clients configured=20 to use
> >it to not remote the Web connection to the Web proxy filter via
>
> > an HTTP tunneled request to TCP 8080 on the clients local Web
> >proxy=20 listener.
> >=20
> > However, if the HTTP protocol is bound to the Web proxy filter,=20
> >Firewall clients, and even the lowly, low security SecureNAT
> >client=20 will be pushed up to the filter. So, in order to get the
> >functionality
>
> > you had with the old HTTP Redirectory Filter, you need to unbind
> >the=20 filter from the protocol.
> >=20
> > Note that this also disables the HTTP Security Filter interface,
> >but=20 it does not disable the Web proxy filter or the HTTP filter
> >for=20 clients configured as Web proxy clients.
> >=20
> > HTH,=3D20
> >=20
> >=20
> > Tom
> > www.isaserver.org/shinder
> > Tom and Deb Shinder's Configuring ISA Server 2004
> > http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> >=20
> >=20
> > -----Original Message-----
> > From: Ted D [mailto:tdoholis@xxxxxxxxxxxxx]=3D20
> > Sent: Tuesday, February 22, 2005 1:11 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Javascript through ISA 2004...
> >=20
> > http://www.ISAserver.org
> >=20
> > Hi Tom,=3D20
> >=20
> > You hit the nail on the head. If I unbind the web proxy filter
> >from=20 HTTP, everything works perfect.....but what does that mean
> >really?? ;) =20 Thanks TD =20
> > > Hi Ted,
> > >=3D20
> > > OK, try one more thing just to "make sure" its not the ISA
firewall.
> > > Unbind the Web proxy filter from the HTTP protocol and (for some
> > reason
> > > I can't think of right now), remove authentication requirements
> > > for
>
> > >access that site.
> > >=3D20
> > > This is sounding like a MIME registration issue to me now. ?=20
> > >:-\=3D3D20 =3D20 =3D20 Tom www.isaserver.org/shinder Tom and
> > >Deb=20 Shinder's Configuring ISA Server 2004
> > > http://tinyurl.com/3xqb7
> > > MVP -- ISA Firewalls
> > >=3D20
> > >=3D20
> > > -----Original Message-----
> > > From: Ted D [mailto:tdoholis@xxxxxxxxxxxxx]=3D3D20
> > > Sent: Tuesday, February 22, 2005 10:49 AM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: Javascript through ISA 2004...
> > >=3D20
> > > http://www.ISAserver.org
> > >=3D20
> > > Hi Tom,=3D3D20
> > >=3D20
> > > I have now got the whole range in the direct access rule and
> > everything
> > > shows an IP rather than a URL. I still have the same problem
> > > though
>
> > >where most times you click on the link, you are prompted to open
> > >or=20 save the jsp file rather than it linking to another page.
> > >BTW this=20 is ISA 2004, clients are XP with all 3 connection
methods.
> > >=3D20
> > > Thanks
> > > TD
> > >=3D20
> > > > Hi Ted,
> > > >=3D3D20
> > > > I can't test directly, because I don't have a log on. However,
> > > >if
> > > you're
> > > > seeing IP addresses and URLs, that indicates the the IP
> > > > addresses
> > are
> > > > the ones most likely using Direct Access, and the URLs are not,
> > since
> > > > only the Web proxy client will show URLs in the log. So, double
> > check
> > > > that the URL sites are also configured for Direct Access.
> > > >=3D3D20
> > > > You *might* have to restart the client computer in order to
> > > >get=20 the
> > > new
> > > > autoconfig script pulled down from the firewall.=3D3D3D20
> > > >=3D3D20=20 =3D3D20 Tom www.isaserver.org/shinder Tom and Deb
> > > >Shinder's=20 Configuring ISA Server 2004
> > > > http://tinyurl.com/3xqb7
> > > > MVP -- ISA Firewalls
> > > >=3D3D20
> > > >=3D3D20
> > > > -----Original Message-----
> > > > From: Ted D [mailto:tdoholis@xxxxxxxxxxxxx]=3D3D3D20
> > > > Sent: Tuesday, February 22, 2005 9:51 AM
> > > > To: [ISAserver.org Discussion List]
> > > > Subject: [isalist] RE: Javascript through ISA 2004...
> > > >=3D3D20
> > > > http://www.ISAserver.org
> > > >=3D3D20
> > > > Hi Tom,
> > > >=3D3D20
> > > > The site is ingrammicro.com. when you are logged in and have
> > > >done=20 a search on a product, you can click on the item for
> > > >real time=20 price and
> > avail.
> > > > detail and this is the jsp link. I can see that the content
> > > > comes
> > from
> > > > multiple places and sometimes they are identified by IP
> > > > rather=20 than
> > > the
> > > > DNS name etc. but dont really know how to identify what the
> > > > exact
>
> > > >problem is as the url never changes so all you ever see in IE
> > > >is=20 http://ca.ingrammicro.com/.....
> > > >=3D3D20
> > > > Thanks
> > > > TD
> > > >=3D3D20
> > > > > Hi Ted,
> > > > >=3D3D3D20
> > > > > I forgot number 5 on my list:
> > > > >=3D3D3D20
> > > > > 5. What specific sites don't work =3D3D3D20
> > > > > :-)
> > > > >=3D3D3D20
> > > > > Really, its impossible to tell what's wrong without being
> > > > >able=20 to
> > > > check
> > > > > out the actual site. The ISA firewall has no problem with
> > > Javascript,
> > > > > it's the specific site that's problematic, or the client
> > > > configuration.
> > > > >=3D3D3D20
> > > > > HTH,=3D3D3D3D20
> > > > >=3D3D3D20
> > > > >=3D3D3D20
> > > > > Tom
> > > > > www.isaserver.org/shinder
> > > > > Tom and Deb Shinder's Configuring ISA Server 2004
> > > > > http://tinyurl.com/3xqb7
> > > > > MVP -- ISA Firewalls
> > > > >=3D3D3D20
> > > > >=3D3D3D20
> > > > > -----Original Message-----
> > > > > From: Ted D [mailto:tdoholis@xxxxxxxxxxxxx]=3D3D3D3D20
> > > > > Sent: Tuesday, February 22, 2005 9:42 AM
> > > > > To: [ISAserver.org Discussion List]
> > > > > Subject: [isalist] Javascript through ISA 2004...
> > > > >=3D3D3D20
> > > > > http://www.ISAserver.org
> > > > >=3D3D3D20
> > > > > I am having trouble getting javascript to work correctly
> > > > >through
> > ISA
> > > > > 2004.
> > > > > FWC is installed and I have a direct access rule for the site.
> > > > > I
> > see
> > > > > that
> > > > > the traffic is identified by the rule and it is allowed but=20
> > > > > about
> > > 90%
> > > > of
> > > > > the time you get a pop up asking you if you want to open or
> > > > > save
> > the
> > > > jsp
> > > > > file. even stranger is the other 10% of the time that it=20
> > > > > actually
> > > > opens
> > > > > the correct page.
> > > > >=3D3D3D20
> > > > > Has anyone had this problem? How did you solve it?
> > > > >=3D3D3D20
> > > > > ------------------------------------------------------
> > > > > List Archives:
> > > http://www.webelists.com/cgi/lyris.pl?enter=3D3D3D3D3Disalist
> > > > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > > > ISA Server FAQ: =3D3D3D
> > > > http://www.isaserver.org/pages/larticle.asp?type=3D3D3D3D3DFAQ
> > > > > ------------------------------------------------------
> > > > > Other Internet Software Marketing Sites:
> > > > > World of Windows Networking:
> > > > > http://www.windowsnetworking.com=20
> > > > > Leading Network Software Directory: http://www.serverfiles.com
> > > > > No.1 Exchange Server Resource Site:
> > > > > http://www.msexchange.org=20 Windows Security Resource Site:
> > > > > http://www.windowsecurity.com/=20 Network Security Library:
> > > > > http://www.secinf.net/ Windows 2000/NT
>
> > > > > Fax Solutions: http://www.ntfaxfaq.com
> > > > > ------------------------------------------------------
> > > > > You are currently subscribed to this ISAserver.org
> > > > > Discussion=20 List
> > > as:
> > > > > tshinder@xxxxxxxxxxxxxxxxxx
> > > > > To unsubscribe visit =3D3D3D3D
> > > > > http://www.webelists.com/cgi/lyris.pl?enter=3D3D3D3D3Disalist
> > > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >=3D3D20
> > > > ------------------------------------------------------
> > > > List Archives:
> > http://www.webelists.com/cgi/lyris.pl?enter=3D3D3D3Disalist
> > > > ISA Server Newsletter:=20
> > > > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ: =3D3D
> > > http://www.isaserver.org/pages/larticle.asp?type=3D3D3D3DFAQ
> > > > ------------------------------------------------------
> > > > Other Internet Software Marketing Sites:
> > > > World of Windows Networking: http://www.windowsnetworking.com=20
> > > > Leading Network Software Directory: http://www.serverfiles.com
> > > > No.1 Exchange Server Resource Site: http://www.msexchange.org=20
> > > > Windows Security Resource Site:
> > > > http://www.windowsecurity.com/=20 Network Security Library:
> > > > http://www.secinf.net/ Windows 2000/NT=20 Fax Solutions:
> > > > http://www.ntfaxfaq.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org Discussion
> > > > List
> > as:
> > > > tshinder@xxxxxxxxxxxxxxxxxx
> > > > To unsubscribe visit =3D3D3D
> > > > http://www.webelists.com/cgi/lyris.pl?enter=3D3D3D3Disalist
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >=3D20
> > > ------------------------------------------------------
> > > List Archives:=20
> > >http://www.webelists.com/cgi/lyris.pl?enter=3D3D3Disalist
> > > ISA Server Newsletter:
> > >http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: =3D
> > http://www.isaserver.org/pages/larticle.asp?type=3D3D3DFAQ
> > > ------------------------------------------------------
> > > Other Internet Software Marketing Sites:
> > > World of Windows Networking: http://www.windowsnetworking.com=20
> > > Leading Network Software Directory: http://www.serverfiles.com
> > > No.1 Exchange Server Resource Site: http://www.msexchange.org=20
> > > Windows Security Resource Site: http://www.windowsecurity.com/=20
> > > Network Security Library: http://www.secinf.net/ Windows 2000/NT
> > > Fax
>
> > > Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List
> as:
> > > tshinder@xxxxxxxxxxxxxxxxxx
> > > To unsubscribe visit =3D3D
> > > http://www.webelists.com/cgi/lyris.pl?enter=3D3D3Disalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> >=20
> > ------------------------------------------------------
> > List Archives:
> >http://www.webelists.com/cgi/lyris.pl?enter=3D3Disalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: =
> http://www.isaserver.org/pages/larticle.asp?type=3D3DFAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading=20 Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows=20 Security Resource Site: http://www.windowsecurity.com/
> > Network=20 Security Library: http://www.secinf.net/ Windows 2000/NT
> > Fax
> > Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List
as:
> > tshinder@xxxxxxxxxxxxxxxxxx
> > To unsubscribe visit =3D
> > http://www.webelists.com/cgi/lyris.pl?enter=3D3Disalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network
> Security
> Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network
> Security
> Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tdoholis@xxxxxxxxxxxxx
> To unsubscribe visit =
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network
> Security
> Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network
> Security
> Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tdoholis@xxxxxxxxxxxxx
> To unsubscribe visit =
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=3DFAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading
> Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
> Security Resource Site: http://www.windowsecurity.com/ Network
> Security
> Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=3Disalist
> Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
The haggis is unusual in that it is neither consistently nocturnal nor diurnal,
but instead is active at dawn and dusk (crepuscular), with occasional forays
forth during the day and night.
Other related posts:
