Re: Trouble shoot Protocol Defn

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 7 Jun 2004 17:57:14 -0700

If that's it, uninstall the game, burn the CD, box and any propaganda that came 
with it and beat the living sh*t out of the entire 
development team.
=^P

Seriously, that's a NetBIOS port (not likely to be part of the game) and you 
should expect that to be blocked.
What you should do is get http://isatools.org/isainfo.vbe, run it on both ISA 
servers and compare the two.
The differences are much easier to see that way.

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message ----- 
From: "Matthew" <matthew@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, June 07, 2004 17:08
Subject: [isalist] Re: Trouble shoot Protocol Defn


http://www.ISAserver.org

I found this in the packet filter log of the server that is not letting the
app through:

Date/time/source-ip: [normal]
destination-ip: 66.212.233.228
Protoco: Udp
param#1: 137
param#2: 137
filter-rule: BLOCKED
Interface: [normal]

It is not there on the server that works.  Also I have no protocol rules
setup for this protocol on either server.  I have not touched the filters
from their default.

Any ideas?

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: June 6, 2004 11:21 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Trouble shoot Protocol Defn

http://www.ISAserver.org

Look in the ISA logs.
If ISA is the one blocking the traffic, the logs will say so.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Sat, 5 Jun 2004 18:15:04 -0400
 "Matthew" <matthew@xxxxxxxxxxxx> wrote:
http://www.ISAserver.org

I rebuit from scratch ISA server to new hardware, at the same time went from
ISA enterprise to stand alone and from client address sets to user auth.

Now an app wont' work (pokerstars.exe TCP-26002).  I then built another
server with what i assume exactly the same except its on win2k3, created the
protocol rule and it works fine.  The app only uses that one port and port
80 so i haven't even a clue where to look for problems....

On my machine I tell the FWClient to use the production ISA - no work,
change to test server, connects no prob.  I have removed my default gateway.
I have defined the Protocol Rule to specifically allow my client IP on both
servers.

Prod server ISA 2000 SP2 FP1 Win2K SP4

Any clues as to what to check?

Regards,

Matthew Colledge


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
matthew@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist



Other related posts: