Exactly that's what I would have thought, but my office ISA server is showing as closed, even though we have a published exchange server as well Paul Crisp Snr Network Support Analyst -----Original Message----- From: Gabriel O. Zabal [mailto:gabriel@xxxxxxxxxx] Sent: Tuesday, September 09, 2003 12:50 PM To: [ISAserver.org Discussion List] http://www.ISAserver.org If it`s bound the FW Service means that you have publshing rules for both of them. It should appear as open on both server if it`s published on both. Gabriel Zabal gabriel@xxxxxxxxxx -----Mensaje original----- De: Paul Crisp [mailto:PCrisp@xxxxxxxxxxxxxxxxx] Enviado el: martes, 09 de septiembre de 2003 13:24 Para: [ISAserver.org Discussion List] Asunto: [isalist] RE: Open ports http://www.ISAserver.org Ok guys I have run the activeports software on the remote offices ISA server and my own. Basically it appears that the external IP address of each ISA server is bound to wspsrvr.exe and this is for both ports 25 and 143 Now I would assume this is correct but it still doesn't explain why one server is blocking portscans on 25 and 143 and the other isn't ? Paul Crisp Snr Network Support Analyst -----Original Message----- From: Paul Crisp Sent: Tuesday, September 09, 2003 11:02 AM To: [ISAserver.org Discussion List] http://www.ISAserver.org Cheers guys I will try all of these suggestions and come back to you Paul Crisp Snr Network Support Analyst -----Original Message----- From: Gabriel O. Zabal [mailto:gabriel@xxxxxxxxxx] Sent: Tuesday, September 09, 2003 11:00 AM To: [ISAserver.org Discussion List] http://www.ISAserver.org You can use this tool to know what service / app is opening those ports. http://www.webattack.com/get/activeports.shtml Also usefull to find binding issues. Hope it Helps Gabriel Zabal gabriel@xxxxxxxxxx -----Mensaje original----- De: Paul Crisp [mailto:PCrisp@xxxxxxxxxxxxxxxxx] Enviado el: martes, 09 de septiembre de 2003 11:26 Para: [ISAserver.org Discussion List] Asunto: [isalist] Open ports http://www.ISAserver.org Hi, I have an ISA server located on a remote site. Its running standard edition and its been setup as a web proxy, email publishing using exchange 5.5 behind the ISA. Everything is working fine on the server, but if I do a port scan on the system it shows SMTP and IMAP4 as open. I have taken a look at the settings on my own offices ISA server and it is setup exactly the same and these two ports are closed. Can anyone point me in the right direction of where to look as I have checked everything out Thanks in advance Paul Crisp Snr Network Support Analyst ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gabriel@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: pcrisp@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: pcrisp@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gabriel@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: pcrisp@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')