http://www.ISAserver.org ------------------------------------------------------- Nope; system otherwise "normal"... -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder Sent: Wednesday, November 22, 2006 8:56 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Think Outside the GUI challenge #2 http://www.ISAserver.org ------------------------------------------------------- External DNS server configured on one of the firewall array member's NICs? Thomas W Shinder, M.D. Site: www.isaserver.org Blog: http://blogs.isaserver.org/shinder/ Book: http://tinyurl.com/3xqb7 MVP -- Microsoft Firewalls (ISA) > -----Original Message----- > From: isalist-bounce@xxxxxxxxxxxxx > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison > Sent: Wednesday, November 22, 2006 10:49 AM > To: isalist@xxxxxxxxxxxxx > Subject: [isalist] Re: Think Outside the GUI challenge #2 > > http://www.ISAserver.org > ------------------------------------------------------- > > Nope; system policies as normal. > > -----Original Message----- > From: isalist-bounce@xxxxxxxxxxxxx > [mailto:isalist-bounce@xxxxxxxxxxxxx] > On Behalf Of Thomas W Shinder > Sent: Wednesday, November 22, 2006 8:37 AM > To: isalist@xxxxxxxxxxxxx > Subject: [isalist] Re: Think Outside the GUI challenge #2 > > http://www.ISAserver.org > ------------------------------------------------------- > > RPC communication between the array members is blocked between the > intraarray addresses? > > Thomas W Shinder, M.D. > Site: www.isaserver.org > Blog: http://blogs.isaserver.org/shinder/ > Book: http://tinyurl.com/3xqb7 > MVP -- Microsoft Firewalls (ISA) > > > > > -----Original Message----- > > From: isalist-bounce@xxxxxxxxxxxxx > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison > > Sent: Wednesday, November 22, 2006 10:17 AM > > To: isalist@xxxxxxxxxxxxx > > Subject: [isalist] Re: Think Outside the GUI challenge #2 > > > > http://www.ISAserver.org > > ------------------------------------------------------- > > > > Interesting thought, but no... > > > > Here's a hint for #1 - wpad data is built from the ISA server's > > understanding of the current array status. > > Here's a hint for #2 - CARP traffic consists of > authenticated traffic > > between array members > > > > ..oh, darn; I may have given it away. > > :-p > > > > -----Original Message----- > > From: isalist-bounce@xxxxxxxxxxxxx > > [mailto:isalist-bounce@xxxxxxxxxxxxx] > > On Behalf Of Amy Babinchak > > Sent: Wednesday, November 22, 2006 8:04 AM > > To: isalist@xxxxxxxxxxxxx > > Subject: [isalist] Re: Think Outside the GUI challenge #2 > > > > http://www.ISAserver.org > > ------------------------------------------------------- > > > > Arrays aren't a feature that I've had a need for yet so this is > > somewhat a stab in the dark. But if it were me troubleshooting why > > array servers didn't populate WSPAD then I'd be looking at > > communications on the domain like DNS and Active Directory lookup > > problems. > > > > Amy Babinchak > > > > > > > > > > > > > > -----Original Message----- > > From: isalist-bounce@xxxxxxxxxxxxx > > [mailto:isalist-bounce@xxxxxxxxxxxxx] > > On Behalf Of Jim Harrison > > Sent: Wednesday, November 22, 2006 10:52 AM > > To: isalist@xxxxxxxxxxxxx > > Subject: [isalist] Re: Think Outside the GUI challenge #2 > > > > http://www.ISAserver.org > > ------------------------------------------------------- > > > > Thought this one would make you "prairie-dog", David... :-p > > > > As you might have noticed, I didn't call out any one particular > > plug-in. > > There are many whose "required ISA settings" will cause those > > problems. > > > > In fact, GFI wasn't one of the "offenders". > > > > Anyone willing to take a guess at the problem / solutions? > > > > -----Original Message----- > > From: isalist-bounce@xxxxxxxxxxxxx > > [mailto:isalist-bounce@xxxxxxxxxxxxx] > > On Behalf Of David Farinic > > Sent: Wednesday, November 22, 2006 7:38 AM > > To: isalist@xxxxxxxxxxxxx > > Subject: [isalist] Re: Think Outside the GUI challenge #2 > > > > http://www.ISAserver.org > > ------------------------------------------------------- > > > > Actually WSPAD and some other auto-replies produced by ISA > > 2000/2004 are > > not consistent to its API specification therefore each 3rd > party dev > > has to go through try and fail cycle to understand possible > problems > > with ISA autoresponses including ms_proxy_intra_array_auth_query. > > > > DavidF > > > > -----Original Message----- > > From: isalist-bounce@xxxxxxxxxxxxx > > [mailto:isalist-bounce@xxxxxxxxxxxxx] > > On Behalf Of Jim Harrison > > Sent: Wednesday, November 22, 2006 4:31 PM > > To: isapros@xxxxxxxxxxxxx; isalist@xxxxxxxxxxxxx > > Subject: [isalist] Think Outside the GUI challenge #2 > > > > http://www.ISAserver.org > > ------------------------------------------------------- > > > > Just last week, I encountered an interesting scenario; two separate > > customers using two completely different ISA plug-ins hit > exactly the > > same problem, although it manifested differently for each. > > > > Cust #1 > > Scenario: ISA 2004 EE, 4 array members W2K3 SP1, separate CSS, all > > domain-joined. > > Problem: When requested, each array member produced a wpad > script that > > > only included itself. In no case did the wpad script list > any of the > > other three array members. > > > > Cust #2 > > Scenario: ISA 2004 EE, LARGE multiple-array deployment, separate, > > multiple CSS, W2K3 SP1, all domain-joined. > > Problem: CARP requests continuously failed. > > > > > > In both cases, the same relative behavior for each plug-in > caused the > > problem - what was it? > > > > > > All mail to and from this domain is GFI-scanned. > > > > ------------------------------------------------------ > > List Archives: //www.freelists.org/archives/isalist/ > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server Articles and Tutorials: > > http://www.isaserver.org/articles_tutorials/ > > ISA Server Blogs: http://blogs.isaserver.org/ > > ------------------------------------------------------ > > Visit TechGenix.com for more information about our other sites: > > http://www.techgenix.com > > ------------------------------------------------------ > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > > Report abuse to listadmin@xxxxxxxxxxxxx > > > > > > > > This mail was checked for viruses by GFI MailSecurity. > > GFI also develops anti-spam software (GFI MailEssentials), a fax > > server (GFI FAXmaker), and network security and management software > > (GFI > > LANguard) - www.gfi.com > > > > ------------------------------------------------------ > > List Archives: //www.freelists.org/archives/isalist/ > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server Articles and Tutorials: > > http://www.isaserver.org/articles_tutorials/ > > ISA Server Blogs: http://blogs.isaserver.org/ > > ------------------------------------------------------ > > Visit TechGenix.com for more information about our other sites: > > http://www.techgenix.com > > ------------------------------------------------------ > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > > Report abuse to listadmin@xxxxxxxxxxxxx > > > > > > All mail to and from this domain is GFI-scanned. > > > > ------------------------------------------------------ > > List Archives: //www.freelists.org/archives/isalist/ > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server Articles and Tutorials: > > http://www.isaserver.org/articles_tutorials/ > > ISA Server Blogs: http://blogs.isaserver.org/ > > ------------------------------------------------------ > > Visit TechGenix.com for more information about our other sites: > > http://www.techgenix.com > > ------------------------------------------------------ > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > > Report abuse to listadmin@xxxxxxxxxxxxx > > > > ------------------------------------------------------ > > List Archives: //www.freelists.org/archives/isalist/ > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server Articles and Tutorials: > > http://www.isaserver.org/articles_tutorials/ > > ISA Server Blogs: http://blogs.isaserver.org/ > > ------------------------------------------------------ > > Visit TechGenix.com for more information about our other sites: > > http://www.techgenix.com > > ------------------------------------------------------ > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > > Report abuse to listadmin@xxxxxxxxxxxxx > > > > > > All mail to and from this domain is GFI-scanned. > > > > ------------------------------------------------------ > > List Archives: //www.freelists.org/archives/isalist/ > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > > ISA Server Articles and Tutorials: > > http://www.isaserver.org/articles_tutorials/ > > ISA Server Blogs: http://blogs.isaserver.org/ > > ------------------------------------------------------ > > Visit TechGenix.com for more information about our other sites: > > http://www.techgenix.com > > ------------------------------------------------------ > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > > Report abuse to listadmin@xxxxxxxxxxxxx > > > > > > > ------------------------------------------------------ > List Archives: //www.freelists.org/archives/isalist/ > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server Articles and Tutorials: > http://www.isaserver.org/articles_tutorials/ > ISA Server Blogs: http://blogs.isaserver.org/ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > Report abuse to listadmin@xxxxxxxxxxxxx > > > All mail to and from this domain is GFI-scanned. > > ------------------------------------------------------ > List Archives: //www.freelists.org/archives/isalist/ > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server Articles and Tutorials: > http://www.isaserver.org/articles_tutorials/ > ISA Server Blogs: http://blogs.isaserver.org/ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp > Report abuse to listadmin@xxxxxxxxxxxxx > > > ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx