RE: Socks4 through ISA??

  • From: "Beynon, Mark" <Mark.Beynon@xxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 16 Feb 2005 17:30:22 -0000

Pardon the numpty question, but what log? And what am I looking for.

The only logs generated in the ISALog folder are Firewall client logs and
Web Proxy. The firewall log shows connections, from the proxy to the remote
IP, so I assume it has accepted it, but no real detail, and the connection
isn't being transmitted.

The content and protocol rules use a domain, but I tried adding a protocol
rule with the client address set of the pc, and it made no difference.

Would I have to stop start the proxy for it to take effect?

Thanks for your reply, time, and mail box space!

Mark

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: 16 February 2005 17:20
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Socks4 through ISA??

http://www.ISAserver.org

Review the ISA logs - that's where you'll see what ISA thought of the
request.
Odds are, you have some authenticated rules (limited to users or
groups).
SOCKS4 doesn't provide for authenticated requests.

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Mark Beynon [mailto:mark.beynon@xxxxxxxxxxxx] 
Sent: Wednesday, February 16, 2005 08:09
To: [ISAserver.org Discussion List]
Subject: [isalist] Socks4 through ISA??

http://www.ISAserver.org

Apologies first as i am a complete newbie to ISA and have been thrown in
at the deep end.

I know that ISA 2000 has the Socks 4 application filter built in, so
theorectically i should just be able to point my internal client at the
proxy proxyip:1080 and this will work?

The sock filter is enabled on the standard port, there are protocol
rules
to allow ftp downloads from anyone, site and content rule to anywhere.
The
firewall client logs shows the connection from proxy server to remote
ftp
server but it never tries to make the connection! i have checked my
firewall and it makes no traffic for that destination. routing is not an
issue.

The ftp client is configured to use the proxy and i can prove the client
by pointing at the old proxy, that runs Proxy2.

The message returned from client is Socks: connection rejected or
refused.

Please help. i dont know how to trouble shoot this!

tar very much

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mark.beynon@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

This email has been scanned for all viruses by the MessageLabs SkyScan
service.


**********************************************************************************
This email and any files transmitted with it are confidential, and may be 
subject to legal privilege, and are intended solely for the use of the 
individual or entity to whom they are addressed.  
If you have received this email in error or think you may have done so, you may 
not peruse, use, disseminate, distribute or copy this message. Please notify 
the sender immediately and delete the original e-mail from your system.

Computer viruses can be transmitted by e-mail. Recipients should check this 
e-mail for the presence of viruses. The Capita Group and its subsidiaries 
accept no liability for any damage caused by any virus transmitted by this 
e-mail.
***********************************************************************************

Other related posts: