Re: Return Nothing from Web Publishing?
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 14 Feb 2002 06:55:27 -0800
Re: Return Nothing from Web Publishing?It doesn't work like that.
ISA plays "by the rules" (RFC). If a connection is attempted to its web
services, it's bound to respond negatively when appropriate.
You can't tell ISA to just "play dumb" in this case.
What's wrong with letting them know you have ISA protecting you? If it's
properly configured, they can't touch you anyway.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!
----- Original Message -----
From: Craft, Steve
To: [ISAserver.org Discussion List]
Sent: Thursday, February 14, 2002 06:42
Subject: [isalist] Re: Return Nothing from Web Publishing?
http://www.ISAserver.org
That's not exactly what I mean. If I do that, then none of my web publishing
works (it defeats the "allow" packet filter I already have for port 80). I
want to reject all traffic from any source IP that tries to connect directly to
the IP number interface on the ISA host.
What I mean is that I want to let in any web traffic to any published site
using web publishing. But if anyone tries to use the external IP number, they
will get "truly rejected" - ISA will not say "403 Forbidden...Internet Security
and Acceleration Server", it will just return nothing and timeout the browser.
I don't want to advertise what I use for security, I just want to reject the
packets destined for a given destination set.
Help?
--origmsg--
Return Nothing from Web Publishing?If you want to reject all requests = based
on source IP, then create a packet filter that denies all = protocols for a
given source IP address.
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts: