RE: Publish all ports - Part 2

  • From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 7 Nov 2003 07:31:46 -0800

I have to agree with Jim.

That is the classic programmers cop out for having to think and work: "It is
working fine when we do it, so it must be some thing you are doing or the
firewall or yada yada."

Are those programmers going to help you when the DB server and web server
are compromise because everything was open to the outside world?

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

> -----Original Message-----
> From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> Sent: Friday, November 07, 2003 5:40 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Publish all ports - Part 2
> 
> http://www.ISAserver.org
> 
> Time for a new product.
> They either have no idea what their application needs or they're very
> sloppy Winsock programmers.
> 
> Sorry; but you'll need to remove ISA and use RRAS for 1:1 mapping.
> 
>   Jim Harrison
>   MCP(NT4, W2K), A+, Network+, PCG
>   http://isaserver.org/Jim_Harrison/
>   http://isatools.org
>   Read the help / books / articles!
> 
> 
> On Fri, 7 Nov 2003 11:31:14 -0000
>  "Stuart Pittwood" <SPittwood@xxxxxxxxxxxxxxxxx> wrote:
> http://www.ISAserver.org
> 
> After having spoken to several user groups and progress support I have
> been told I need to allow access on all UDP ports between the web server
> in our DMZ & the database broker on the internal lan, with an ISA server
> in between.  Can anyone let me know the easiest way to acheive this?
> 
> Regards
> 
> Stu
> 
>       -----Original Message-----
>       From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
>       Sent: 06 November 2003 14:21
>       To: [ISAserver.org Discussion List]
>       Subject: [isalist] RE: Publish all ports
> 
> 
>       http://www.ISAserver.org
> 
>       Hi Stuart,
> 
>       No, not unless you put the machine in a DMZ. The best way to
> test an app is to put the two on the same segment and then run a
> protocol analyzer on both of them.
> 
>       HTH,
>       Tom
> 
>   _____
> 
>       From: Stuart Pittwood [mailto:SPittwood@xxxxxxxxxxxxxxxxx]
>       Sent: Thursday, November 06, 2003 4:51 AM
>       To: [ISAserver.org Discussion List]
>       Subject: [isalist] Publish all ports
> 
> 
>       http://www.ISAserver.org
> 
>       I'm pretty certain the answer is no but I'll ask just in case.
> 
>       Is there anyway to publish an internal server on all ports.  I
> need to do this temporarily to test the basic setup on an application
> (basically, allow all access, test the app, unpublish the server)
> 
>       Thanks
> 
>       stu
>       ------------------------------------------------------
>       List Archives:
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>       ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>       ISA Server FAQ:
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
>       ------------------------------------------------------
>       Other Internet Software Marketing Sites:
>       Leading Network Software Directory: http://www.serverfiles.com
>       No.1 Exchange Server Resource Site: http://www.msexchange.org
>       Windows Security Resource Site: http://www.windowsecurity.com/
>       Network Security Library: http://www.secinf.net/
>       Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>       ------------------------------------------------------
>       You are currently subscribed to this ISAserver.org Discussion
> List as: tshinder@xxxxxxxxxxxxxxxxxx
>       To unsubscribe send a blank email to
> $subst('Email.Unsub')
> 
>                       A full list of partners in Amery-Parkes is
> available for inspection at all of our offices.
> 
> 
> 
>                       Information contained in this e-mail is intended
> for the use of the addressee only, and is confidential and may be the
> subject of Legal Professional Privilege. Any dissemination,
> distribution, copying or use this communication without prior permission
> of the addressee is strictly prohibited.
> 
> 
> 
>                       The contents of an attachment to this email may
> contain software viruses which could damage your own computer system.
> Whilst Amery-Parkes has taken every reasonable precaution to minimise
> this risk, we do not accept liability for any damage which you sustain
> as a result of software viruses. You should carry out your own virus
> checks before opening any attachment to this email.
> 
>       ------------------------------------------------------
>       List Archives:
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
>       ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
>       ISA Server FAQ:
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
>       ------------------------------------------------------
>       Other Internet Software Marketing Sites:
>       Leading Network Software Directory: http://www.serverfiles.com
>       No.1 Exchange Server Resource Site: http://www.msexchange.org
>       Windows Security Resource Site: http://www.windowsecurity.com/
>       Network Security Library: http://www.secinf.net/
>       Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
>       ------------------------------------------------------
>       You are currently subscribed to this ISAserver.org Discussion
> List as: spittwood@xxxxxxxxxxxxxxxxx
>       To unsubscribe send a blank email to
> $subst('Email.Unsub')
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')
> 
> ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*
> 
> All mail from this domain is virus-scanned with RAV.
> www.ravantivirus.com
> 
> ^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: