Re: Return Nothing from Web Publishing?
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 14 Feb 2002 06:55:27 -0800
Re: Return Nothing from Web Publishing?It doesn't work like that. ISA plays "by the rules" (RFC). If a connection is attempted to its web services, it's bound to respond negatively when appropriate. You can't tell ISA to just "play dumb" in this case. What's wrong with letting them know you have ISA protecting you? If it's properly configured, they can't touch you anyway. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the books! ----- Original Message ----- From: Craft, Steve To: [ISAserver.org Discussion List] Sent: Thursday, February 14, 2002 06:42 Subject: [isalist] Re: Return Nothing from Web Publishing? http://www.ISAserver.org That's not exactly what I mean. If I do that, then none of my web publishing works (it defeats the "allow" packet filter I already have for port 80). I want to reject all traffic from any source IP that tries to connect directly to the IP number interface on the ISA host. What I mean is that I want to let in any web traffic to any published site using web publishing. But if anyone tries to use the external IP number, they will get "truly rejected" - ISA will not say "403 Forbidden...Internet Security and Acceleration Server", it will just return nothing and timeout the browser. I don't want to advertise what I use for security, I just want to reject the packets destined for a given destination set. Help? --origmsg-- Return Nothing from Web Publishing?If you want to reject all requests = based on source IP, then create a packet filter that denies all = protocols for a given source IP address. ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')