Hi Amy, Two things to try before banging heads against the log file: 1. Create "all open" site and content and protocol rules 2. Make sure the firewall client is working on the client (looks like it is) 3. Make sure the client is not configured as Web Proxy client If it doesn't work with this setup, it won't work ever. Also, where is the a private address in the packet filter log? That might the hint as to what the problem is. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Amy Babinchak [mailto:Amy@xxxxxxxxxxxxxxxxxxxxxxxxxx] Sent: Wednesday, May 28, 2003 6:20 PM To: [ISAserver.org Discussion List] Subject: [isalist] Need some help getting AOL through ISA http://www.ISAserver.org I've been working on this problem for a little while now off and on. AOL support has been no help at all so I'm coming to you guys. Client computer is new Windows XP notebook and is running the firewall client and Symantec anti-virus corporate edition. The client computer can log into AOL but can't get to the Internet through AOL. In the current version of AOL that means no buddy list or address book. Oddly AOL instant messaging contains the same buddy list and works fine. So outside of AOL it can get there just fine but when running inside of AOL it can't. AOL attempts to access them but times out with the message of "a response from the server took long than expected". I recorded the time and copied out the relevant sections of the ISA server logs. I'm not sure how to interpret the logs. I'm hoping that there is some information here that will help resolve the problem. FWSEXTD Log 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:44:11 SBS - 205.188.68.5 5190 38484 563 288 5190 UDP UdpMap 20000 834 13103 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:44:11 SBS - 205.188.68.5 5190 38484 563 288 5190 UDP Connect 20000 834 13103 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:44:27 SBS - 205.188.68.13 5190 59469 4246 113950 5190 TCP Connect 20000 834 13101 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:44:27 SBS - 205.188.146.146 80 53437 294 500 80 TCP Connect 20000 834 13104 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:44:27 SBS - 205.188.146.146 80 53094 307 500 80 TCP Connect 20000 834 13105 10.0.0.20 - - 2003-05-28 19:44:51 SBS - 162.93.252.52 443 78 - - 443 TCP Connect 0 803 13106 10.0.0.20 - - 2003-05-28 19:45:22 SBS - 162.93.252.52 443 31500 1850 5898 443 TCP Connect 20000 803 13106 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:23 SBS - - - - - - 0 UDP Bind 0 835 13107 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:23 SBS - 64.7.11.2 53 - - - 53 UDP Connect 0 835 13107 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:23 SBS - 64.7.11.2 53 - - - 53 UDP UdpMap 0 835 13107 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:23 SBS - 64.7.11.2 53 - - - 53 UDP UdpMap 20000 835 13107 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:23 SBS - 64.7.11.2 53 - - - 53 UDP Connect 20000 835 13107 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:23 SBS - 205.188.68.207 5190 - - - 5190 TCP Connect 0 835 13108 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:23 SBS - 205.188.68.207 5190 - - - 5190 TCP Connect 0 835 13108 10.0.0.20 - - 2003-05-28 19:45:26 SBS - 162.93.252.52 443 94 - - 443 TCP Connect 0 803 13109 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:27 SBS - 205.188.68.207 5190 3672 - - 5190 TCP Connect 20000 835 13108 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:27 SBS AmericaOnline.aol.com 205.188.68.13 - 16 - - - - GHBN 0 835 0 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:27 SBS 10.0.0.1 10.0.0.1 - - - - - - GHBN 0 835 0 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:27 SBS - 205.188.68.13 5190 - - - 5190 TCP Connect 0 835 13110 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:27 SBS - 205.188.68.13 5190 - - - 5190 TCP Connect 0 835 13110 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:31 SBS - - - - - - 0 UDP Bind 0 835 13111 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:31 SBS - 205.188.68.5 5190 - - - 5190 UDP Connect 0 835 13111 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:31 SBS - 205.188.68.5 5190 - - - 5190 UDP UdpMap 0 835 13111 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:33 SBS - 205.188.68.5 5190 1203 4 4 5190 UDP UdpMap 20000 835 13111 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:33 SBS - 205.188.68.5 5190 1203 4 4 5190 UDP Connect 20000 835 13111 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:33 SBS - - - - - - 0 UDP Bind 0 835 13112 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:33 SBS - 205.188.68.5 5190 - - - 5190 UDP Connect 0 835 13112 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:33 SBS - 205.188.68.5 5190 - - - 5190 UDP UdpMap 0 835 13112 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:33 SBS ie3.proxy.aol.com 205.188.146.146 - - - - - - GHBN 0 835 0 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:33 SBS - 205.188.146.146 80 - - - 80 TCP Connect 0 835 13113 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:33 SBS - 205.188.146.146 80 - - - 80 TCP Connect 0 835 13113 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:34 SBS ie3.proxy.aol.com 205.188.146.146 - - - - - - GHBN 0 835 0 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:34 SBS - 205.188.146.146 80 - - - 80 TCP Connect 0 835 13114 10.0.0.32 JackC waol.exe:3:5.1 2003-05-28 19:45:34 SBS - 205.188.146.146 80 - - - 80 TCP Connect 0 835 13114 10.0.0.20 - - 2003-05-28 19:46:00 SBS - 162.93.252.52 443 34031 1850 5896 443 TCP Connect 20000 803 13109 10.0.0.20 - - 2003-05-28 19:46:26 SBS - 162.93.252.52 443 78 - - 443 TCP Connect 0 803 13115 IPPEXTD Log 2003-05-28 19:46:48 192.168.1.101 169.254.101.152 Udp 1278 137 BLOCKED 192.168.1.101 2003-05-28 19:46:50 192.168.1.101 169.254.101.152 Udp 1278 137 BLOCKED 192.168.1.101 thanks, Amy ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')