RE: Mac problems - desperate for help!

  • From: "Quillman Shawn (RBNA/CSA1) *" <Shawn.Quillman@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 30 Jun 2004 16:09:04 -0400

Yes.  I'm not talking SMTP authentication yet (you're right, that's part
of the data stream at the application layer).  I'm talking about just
getting the traffic out through the ISA.  If the protocol rule's using
user-based authentication the macs are screwed.

We need a world in which everything tunnels through HTTP :)  (JOKE, NO
LINCHING!)

-Shawn

-----
Shawn R. Quillman
Robert Bosch Corporation RBNA/CSA1
38000 Hills Tech Drive
Farmington Hills, MI 48331
(248) 553-1164 (P) (248) 848-6969 (F)
shawn.quillman@xxxxxxxxxxxx

-----Original Message-----
From: Thor [mailto:thor@xxxxxxxxxxxxxxx] 
Sent: Wednesday, June 30, 2004 3:59 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Mac problems - desperate for help!

http://www.ISAserver.org

Wait though.. that would be if the protocol rule used user-based
authentication, right?

SMTP auth is done in-protocol just like POP3 authentication (clear text
authentication) over 25 unless you are actually using SSMTP, so it
sounds to me like a rule problem.  The mac clients just needs to have 25
allowed outbound

Mike, can the mac clients telnet to the ISP's SMTP server on 25?  If so,
try to relay mail out manually (direct SMTP command entry) and see if
there is some routing restriction on the ISP side...

t



----- Original Message -----
From: "Quillman Shawn (RBNA/CSA1) *" <Shawn.Quillman@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, June 30, 2004 12:49 PM
Subject: [isalist] RE: Mac problems - desperate for help!


http://www.ISAserver.org


If you have any rules implementing username-based authentication through
the firewall service they'll kill your macs, that can only happen when
using the firewall client.  Only the web proxy service will do
username-based authentication without the firewall client.  Also,
although I don't think it's your problem here, you can only use Basic
authentication with Macs.

-Shawn


-----
Shawn R. Quillman
Robert Bosch Corporation RBNA/CSA1
38000 Hills Tech Drive
Farmington Hills, MI 48331
(248) 553-1164 (P) (248) 848-6969 (F)
shawn.quillman@xxxxxxxxxxxx

-----Original Message-----
From: Mike-TechniSource [mailto:mike@xxxxxxxxxxxxxxxx]
Sent: Wednesday, June 30, 2004 3:39 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Mac problems - desperate for help!

http://www.ISAserver.org

Hello All,

I've had very mixed results, using ISA 2000 with Macs behind the
firewall.

A problem I am having presently, is our Mac clients (using POP3) in
regards to retrieving their e-mail.  They can retrieve their e-mail -
BUT they are not able to SEND mail - and they have SMTP authentication
turned on (because it's required by their ISP).  I am not sure if the
SMTP auth is adding another level of complexity to the situation - but
turning it off is not an option.

Are there any tidbits of information you can throw my way, or any
articles that will explain all of the ins and outs of running Macs in a
ISA 2000 environment?  I know there are no ISA Software Clients for the
Macs (which is really unfortunate) - and they are forced to run as a
Secure-NAT clients which under normal circumstances, *should* be good
enough.

BUT in this case, hardly anybody can send e-mail - and of course, the
PC's work flawlessly.  I don't want to sound like a Mac Basher, but why
must EVERYTHING be so darn difficult, the moment Macs enter into the
picture????

Thanks very much in advance for any info you can offer.

Mike

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
shawn.quillman@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
thor@xxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
shawn.quillman@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist



Other related posts: