Re: Trouble shoot Protocol Defn

  • From: "Matthew" <matthew@xxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 7 Jun 2004 20:08:56 -0400

I found this in the packet filter log of the server that is not letting the
app through:

Date/time/source-ip:    [normal]        
destination-ip:                 66.212.233.228
Protoco:                        Udp
param#1:                        137     
param#2:                        137     
filter-rule:            BLOCKED
Interface:                      [normal]

It is not there on the server that works.  Also I have no protocol rules
setup for this protocol on either server.  I have not touched the filters
from their default.

Any ideas?

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: June 6, 2004 11:21 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Trouble shoot Protocol Defn

http://www.ISAserver.org

Look in the ISA logs.
If ISA is the one blocking the traffic, the logs will say so.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Sat, 5 Jun 2004 18:15:04 -0400
 "Matthew" <matthew@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org

I rebuit from scratch ISA server to new hardware, at the same time went from
ISA enterprise to stand alone and from client address sets to user auth.  
 
Now an app wont' work (pokerstars.exe TCP-26002).  I then built another
server with what i assume exactly the same except its on win2k3, created the
protocol rule and it works fine.  The app only uses that one port and port
80 so i haven't even a clue where to look for problems.... 

On my machine I tell the FWClient to use the production ISA - no work,
change to test server, connects no prob.  I have removed my default gateway.
I have defined the Protocol Rule to specifically allow my client IP on both
servers.

Prod server ISA 2000 SP2 FP1 Win2K SP4

Any clues as to what to check?

Regards,

Matthew Colledge


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
matthew@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist



Other related posts: