RE: Post Scanning ISA Server
- From: "Thomas W. Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 22 Feb 2002 09:44:07 -0600
Hi Stefaan,
Thanks!
Tom
www.isaserver.org/shinder
-----Original Message-----
From: Stefaan Pouseele [mailto:stefaan.pouseele@xxxxxxx]
Sent: Friday, February 22, 2002 9:01 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Post Scanning ISA Server
Hi Tom,
maybe somewhat of topic, but following newspost can be usefull.
Regards,
Stefaan
Hi,
there is a simple free program called 'Attacker v3.0' from Foundstone
you
can use for it. Basically you can tell it on which UDP/TCP it must
listen
and give an alert when a connection attempt has been received. For more
info
goto http://www.foundstone.com/knowledge/free_tools.html and select
Intrusion Detection.
Hope this helps,
Stefaan
"Jim Harrison" <jim@xxxxxxxxxxxx> wrote in message
news:#0jZmViuBHA.428@xxxxxxxxxxxxxx
> Telnet server only listens on port 23.
> The telnet client app is a useful TCP-only troubleshooting too because
you
can tell it what port to use.
> Whatever port you're trying to test through ISA has to have something
listening on that port at the other end.
>
> --
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/authors/harrison/
> Read the books!
>
> "Matthew" <mlbade@xxxxxxxxxxxxxxx> wrote in message
news:3c72d1dc.28359028@xxxxxxxxxxxxxxxxxxxxx
> Ok, so i can use telnet and give it the specific port number to
> utilize. However i guess the server at the other end will have to
> allow the port i am trying to test through its firewall (if it has a
> firewall). Lets say it does not have a firewall. Does telnet on the
> server have to be told to listen on the port im trying to connect to
> or does that matter?
>
> matt
>
> On Sun, 17 Feb 2002 19:11:48 -0800, "Jim Harrison" <jim@xxxxxxxxxxxx>
> wrote:
>
> >Ultimately, there has to be a remote endpoint to test with.
> >If it's a TCP port, you can use telnet to test it and view the ISA FW
log
to see if it was allowed.
> >
> >--
> >Jim Harrison
> >MCP(NT4, W2K), A+, Network+, PCG
> >http://isaserver.org/authors/harrison/
> >Read the books!
> >
> >"Matthew" <mlbade@xxxxxxxxxxxxxxx> wrote in message
news:3c70482b.1327028@xxxxxxxxxxxxxxxxxxxxx
> >I have created a protocol rule to open a port. How can i test to see
> >if the port is open from the securenat client. Can i use ping or
> >telnet or some program to show me if communication in and out of that
> >certain port is working from my securenat client through the isa
> >server and back?
> >
> >THanks
> >matt
> >
> >
> >
>
>
>
-----Original Message-----
From: Thomas W. Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: vrijdag 22 februari 2002 9:50
To: [ISAserver.org Discussion List]
Subject: [isalist] Post Scanning ISA Server
http://www.ISAserver.org
In response to many requests I wrote up a quick article on port scanning
the external interface of ISA Server.
Comments, questions and improvements heartily welcomed!
http://www.tacteam.net/isaserverorg/pscan_isa.htm
After getting some feedback, I'll get it up on the ISAserver.org site.
Thanks!
Tom
www.isaserver.org/shinder
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
stefaan.pouseele@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
