RE: Please help!

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 10 Jun 2003 20:58:28 -0500

Hi Barbara,
 
You can NOT put domain members on a non-LAT segment. So, you'll have to
put them behind the ISA firewall if you want them to be in the domain.
You should be able to install the filter on the local ISA Server and use
local user/group or IP address blocking.
 
HTH,
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 

        -----Original Message-----
        From: Barbara Causey
[mailto:causeyb@xxxxxxxxxxxxxxxxxxxxxxxxxxx] 
        Sent: Tuesday, June 10, 2003 8:26 AM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RE: Please help!
        
        
        http://www.ISAserver.org
        
        
        Thanks to everyone for trying to help me. We are a public
library and we are going on a statewide filtering program using
SmartFilter. The person in charge of this in Atlanta can not get this to
work with ISA because it filters by IP address and there is only one
public IP address on ISA and we do not want all of our computers
filtered, just the ones the public uses. So we thought we had figured
out how to do it by just making the public computers public IP addresses
since there is not anything crucial on these computers anyway, but I get
DNS errors even though I give them public DNS numbers.
         
        They really need to be on our domain because a lot of the
programs on these computers are mapped to one of our servers on the
internal network. Hopefully this makes more sense. :-)

                ----- Original Message ----- 
                From: Edward Sullivan <mailto:esullivan@xxxxxxx>  
                To: [ISAserver.org Discussion List]
<mailto:isalist@xxxxxxxxxxxxx>  
                Sent: Monday, June 09, 2003 7:45 PM
                Subject: [isalist] RE: Please help!

                http://www.ISAserver.org
                
                
                Simple answer to your DNS issue will be to reconfigure
the "bastion" W2K systems to use an external DNS server. Since they will
be on the public Internet, you won't be able to use your private DNS
server to perfom lookups.
                 
                Wouldn't recommend putting ANYTHING outside your
firewall/ISA system though. Even if your systems aren't compromised,
they will constantly be in a state of  "inquiry" by undesirables.
                 
                Ed Sullivan 
                Director of Information Technology 
                esullivan@xxxxxxx <mailto:esullivan@xxxxxxx> 
                KMA Direct Communications 
                Confidential and Proprietary 
                 
                 

                        -----Original Message-----
                        From: John Tolmachoff (Lists)
[mailto:johnlist@xxxxxxxxxxxxxxxxxxx]
                        Sent: Monday, June 09, 2003 6:42 PM
                        To: [ISAserver.org Discussion List]
                        Subject: [isalist] RE: Please help!
                        
                        
                        http://www.ISAserver.org
                        
                        

                        What is the reason for giving them public IP
addresses?

                         

                        John Tolmachoff MCSE CSSA

                        Engineer/Consultant

                        eServices For You

                        www.eservicesforyou.com

                         

                        -----Original Message-----
                        From: Barbara Causey
[mailto:causeyb@xxxxxxxxxxxxxxxxxxxxxxxxxxx] 
                        Sent: Monday, June 09, 2003 1:07 PM
                        To: [ISAserver.org Discussion List]
                        Subject: [isalist] Please help!

                         

                        http://www.ISAserver.org

                        Hello All,

                         

                        I know there is a solution to this problem and I
am hoping that all of you knowledgeable folks will help me find it. 

                         

                        We have one domain and the ISA server is between
the internal network and the router. All of the internal computers have
private IP addresses and we have a separate DNS server also with a
private IP address. What we need to do is take part of our computers
from behind the ISA server and give them public IP addresses, but we
keep getting DNS errors. Please tell me how to make this work!

                         

                        Thank you,

                        Barbara Causey, MCP, A+, Net+
                        Roddenbery Memorial Library
                        320 N. Broad St.
                        Cairo, GA 39828
                        Phone: 229-377-3632 x211
                        Fax: 229-377-7204
                        Website: www.grady.public.lib.ga.us

        
------------------------------------------------------
                        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
                        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        
------------------------------------------------------
                        Other Internet Software Marketing Sites:
                        Leading Network Software Directory:
http://www.serverfiles.com
                        No.1 Exchange Server Resource Site:
http://www.msexchange.org
                        Windows Security Resource Site:
http://www.windowsecurity.com/
                        Network Security Library: http://www.secinf.net/
                        Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
        
------------------------------------------------------
                        You are currently subscribed to this
ISAserver.org Discussion List as: johnlist@xxxxxxxxxxxxxxxxxxx
                        To unsubscribe send a blank email to
$subst('Email.Unsub') 

        
------------------------------------------------------
                        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
                        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        
------------------------------------------------------
                        Other Internet Software Marketing Sites:
                        Leading Network Software Directory:
http://www.serverfiles.com
                        No.1 Exchange Server Resource Site:
http://www.msexchange.org
                        Windows Security Resource Site:
http://www.windowsecurity.com/
                        Network Security Library: http://www.secinf.net/
                        Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
        
------------------------------------------------------
                        You are currently subscribed to this
ISAserver.org Discussion List as: esullivan@xxxxxxx
                        To unsubscribe send a blank email to
$subst('Email.Unsub') 

                ------------------------------------------------------
                List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
                ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
                ------------------------------------------------------
                Other Internet Software Marketing Sites:
                Leading Network Software Directory:
http://www.serverfiles.com
                No.1 Exchange Server Resource Site:
http://www.msexchange.org
                Windows Security Resource Site:
http://www.windowsecurity.com/
                Network Security Library: http://www.secinf.net/
                Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
                ------------------------------------------------------
                You are currently subscribed to this ISAserver.org
Discussion List as: causeyb@xxxxxxxxxxxxxxxxxxxxxxxxxxx
                To unsubscribe send a blank email to
$subst('Email.Unsub') 

        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
        To unsubscribe send a blank email to
$subst('Email.Unsub') 

Other related posts: