Yes. I'm not talking SMTP authentication yet (you're right, that's part of the data stream at the application layer). I'm talking about just getting the traffic out through the ISA. If the protocol rule's using user-based authentication the macs are screwed. We need a world in which everything tunnels through HTTP :) (JOKE, NO LINCHING!) -Shawn ----- Shawn R. Quillman Robert Bosch Corporation RBNA/CSA1 38000 Hills Tech Drive Farmington Hills, MI 48331 (248) 553-1164 (P) (248) 848-6969 (F) shawn.quillman@xxxxxxxxxxxx -----Original Message----- From: Thor [mailto:thor@xxxxxxxxxxxxxxx] Sent: Wednesday, June 30, 2004 3:59 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Mac problems - desperate for help! http://www.ISAserver.org Wait though.. that would be if the protocol rule used user-based authentication, right? SMTP auth is done in-protocol just like POP3 authentication (clear text authentication) over 25 unless you are actually using SSMTP, so it sounds to me like a rule problem. The mac clients just needs to have 25 allowed outbound Mike, can the mac clients telnet to the ISP's SMTP server on 25? If so, try to relay mail out manually (direct SMTP command entry) and see if there is some routing restriction on the ISP side... t ----- Original Message ----- From: "Quillman Shawn (RBNA/CSA1) *" <Shawn.Quillman@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Wednesday, June 30, 2004 12:49 PM Subject: [isalist] RE: Mac problems - desperate for help! http://www.ISAserver.org If you have any rules implementing username-based authentication through the firewall service they'll kill your macs, that can only happen when using the firewall client. Only the web proxy service will do username-based authentication without the firewall client. Also, although I don't think it's your problem here, you can only use Basic authentication with Macs. -Shawn ----- Shawn R. Quillman Robert Bosch Corporation RBNA/CSA1 38000 Hills Tech Drive Farmington Hills, MI 48331 (248) 553-1164 (P) (248) 848-6969 (F) shawn.quillman@xxxxxxxxxxxx -----Original Message----- From: Mike-TechniSource [mailto:mike@xxxxxxxxxxxxxxxx] Sent: Wednesday, June 30, 2004 3:39 PM To: [ISAserver.org Discussion List] Subject: [isalist] Mac problems - desperate for help! http://www.ISAserver.org Hello All, I've had very mixed results, using ISA 2000 with Macs behind the firewall. A problem I am having presently, is our Mac clients (using POP3) in regards to retrieving their e-mail. They can retrieve their e-mail - BUT they are not able to SEND mail - and they have SMTP authentication turned on (because it's required by their ISP). I am not sure if the SMTP auth is adding another level of complexity to the situation - but turning it off is not an option. Are there any tidbits of information you can throw my way, or any articles that will explain all of the ins and outs of running Macs in a ISA 2000 environment? I know there are no ISA Software Clients for the Macs (which is really unfortunate) - and they are forced to run as a Secure-NAT clients which under normal circumstances, *should* be good enough. BUT in this case, hardly anybody can send e-mail - and of course, the PC's work flawlessly. I don't want to sound like a Mac Basher, but why must EVERYTHING be so darn difficult, the moment Macs enter into the picture???? Thanks very much in advance for any info you can offer. Mike ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: shawn.quillman@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: thor@xxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: shawn.quillman@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist