Re: OT - texas hold em

Realistically, you have to do what the GFI folks did - use pattern matching in 
the response stream. 
Request and response headers are ok unless the "bad place" decides to spoof 
them.

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx] 
Sent: Tuesday, January 03, 2006 14:25
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: OT - texas hold em

http://www.ISAserver.org

2004 is far easier for me.  But that's me.  And you are right, since I "speak" 
netmon as a native tounge, I have no need for a parser.

Have you guys been running around with the WMF stuff?  Or have you found the 
application/x-msmetafile mime block is all you have to do?

t

-----
"I may disapprove of what you say,
but I will defend to the death your
right to say it."


----- Original Message -----
From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, January 03, 2006 11:54 AM
Subject: [isalist] Re: OT - texas hold em


http://www.ISAserver.org

No harder (and in fact a bit easier) than ISA 2004 log queries.
LogParser (http://logparser.com) is the sweetest tool I've ever used for 
text file queries.
It also does netmon caps, but no one here is interested in that...
:-)

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------


-----Original Message-----
From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
Sent: Tuesday, January 03, 2006 11:17
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: OT - texas hold em

http://www.ISAserver.org

Mangling ISA 2000 log files sucks.  The "live monitoring" of ISA 2004 makes 
things *so* much easier.  Basically, you fire up a monitoring session, run 
your apps, and watch what gets denied- then you  create rules to make it 
work.  Way easier than the old "manual" way.  Also easier for folks who are 
not "NetMon" people.

good luck!  And tell that "Moneymaker" guy that he's a punk. ;)

t


-----
"I may disapprove of what you say,
but I will defend to the death your
right to say it."


----- Original Message -----
From: "Neil Cassidy" <ncassidy@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, January 03, 2006 11:12 AM
Subject: [isalist] Re: OT - texas hold em


http://www.ISAserver.org

I have had the upgrade CD on my shelf for about 3 months now, I may upgrade
next weekend now that you have "sweetened the pot".

-----Original Message-----
From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
Sent: Tuesday, January 03, 2006 1:59 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: OT - texas hold em


http://www.ISAserver.org

You'll need to check the logs and find out what is being denied- or do a
packet trace to make sure you've got the right rules for those applications
to run.

It's far easier with ISA 2004 if you were thinking about upgrading.  What a
better reason to upgrade than Texas Holdem?

t

-----
"I may disapprove of what you say,
but I will defend to the death your
right to say it."


----- Original Message ----- 
From: "Neil Cassidy" <ncassidy@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, January 03, 2006 10:47 AM
Subject: [isalist] OT - texas hold em


http://www.ISAserver.org

Ok, so I spent most of my winter break watching the World Series of Poker on
ESPN2, and consider myself the next big thing in the world of poker, despite
never playing with more than $5 at stake....  Anyway, I play online from
home on an online website, works no problem.  At work (winxp pro on SBS2k3
w/ISA 2000) it does not work.  Their technical support suggested the
following (without them knowing it was ISA).  Would any of this apply to ISA
also?  Sorry I am slightly less proficient at ISA than I am at texas hold
em.  And if it does apply how would I apply it?  I will wear an "Isa
Server.org" shirt or hat at next years event....  Here is what they said:


If you're still having problems please check the settings for any Firewall
you may have there. Are you running any of these packages?

Norton Internet Security / Norton Firewall / Norton AntiVirus

McAfee Security Center /  McAfee Firewall / McAfee AntiVirus
ZoneAlarm
Kerio

If you are, please allow full access to the net for both PokerStars.exe or
GUI and PokerStarsUpdate.exe. Also set the following

IP addresses as trusted:

    66.212.225.17

    66.212.225.22

    66.212.233.228

    66.212.233.226

    66.212.235.34

    66.212.235.35

    66.212.235.113

    66.212.235.114


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
thor@xxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ncassidy@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
thor@xxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
thor@xxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.

Other related posts: