[isalist] Re: VPN over the net

  • From: "Thor (Hammer of God)" <Thor@xxxxxxxxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Thu, 23 Mar 2006 08:35:02 -0800

http://www.ISAserver.org
-------------------------------------------------------
All four of you, eh?


t

On Mar 23, 2006, at 6:56 AM, Thomas W Shinder wrote:

http://www.ISAserver.org
-------------------------------------------------------

That's about the same freq we meet with our wives :)

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
Sent: Thursday, March 23, 2006 8:53 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN over the net

http://www.ISAserver.org
-------------------------------------------------------

Nah - we just don't get together much...
I've known Tom for ~6 years and we've only actually been in
each other's
presence about that many times...

Where's dem craptures, Andy?

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andrew English
Sent: Thursday, March 23, 2006 6:38 AM
To: isalist@xxxxxxxxxxxxx
Subject: RE: [isalist] Re: VPN over the net

From what I have seen in the past 8 hours here it would seem that you
guys don't get out much. ;)

Regards,
Andrew

________________________________

From: isalist-bounce@xxxxxxxxxxxxx on behalf of Steve Moffat
Sent: Thu 23/03/2006 8:50 AM
To: ISA Mailing List
Subject: [isalist] Re: VPN over the net



http://www.ISAserver.org
-------------------------------------------------------

Sounds like a good gig...I might tear myself away from here also...

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Sent: Thursday, March 23, 2006 9:36 AM
To: ISA Mailing List
Subject: [isalist] Re: VPN over the net

http://www.ISAserver.org
-------------------------------------------------------

Yee haw! Good times will be had by all.

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
Sent: Thursday, March 23, 2006 12:06 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN over the net

http://www.ISAserver.org
-------------------------------------------------------

I'll be there, too.
Much Sambuco to be imbibed...

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder
Sent: Wednesday, March 22, 2006 9:15 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN over the net

http://www.ISAserver.org
-------------------------------------------------------

Hi Jerry,

Well, maybe I'll see you at TechEd in Boston this year and we can
double team the crowd with our tin cups :)

It's a pleasure to have you on this list. A lot of us guys have been
here for going on six years, so you know we's ain't going nowhere :)

Tom

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Young, Gerald G
Sent: Wednesday, March 22, 2006 10:55 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN over the net

http://www.ISAserver.org
-------------------------------------------------------

Panhandling?!  That strikes me as extremely... Odd.  :)

And who says I have a real job? :). Could just be a
fancy title. ;)

If I had a nickle for every time... Well, I guess you
can work that
one out. :). I, too, depend upon change from generous
donors. So,
we're a bit of two peas in a pod. :)

All joking aside, I must say I greatly admire the effort you and
others have given to help our friend Andy out.  :D

Another list and...  Well, you know. :)

You guys really are awesome!  I'm so glad I joined the list.
It has been invaluable.  :)

Metered listserv anyone? ;)

A quarter per message sounds reasonable.  :)

Cordially yours,
Jerry G. Young II +From Blackberry+
  MCSE (4.0/W2K)
Atlanta EES Implementation Team Lead HHS Engineering Unisys

11493 Sunset Hills Rd.
Reston, VA 20190
Office: 703-579-2727
Cell: 703-625-1468

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE
PROPRIETARY MATERIAL and is thus for use only by the intended
recipient. If you received this in error, please contact
the sender
and delete the e-mail and its attachments from all computers.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx <isalist-bounce@xxxxxxxxxxxxx>
To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx>
Sent: Wed Mar 22 23:41:34 2006
Subject: [isalist] Re: VPN over the net

http://www.ISAserver.org
-------------------------------------------------------

Hi Jerry,

You have a real job. I have to carry a cup and beg for change. :)

Tom

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
Young, Gerald G
Sent: Wednesday, March 22, 2006 9:08 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN over the net

http://www.ISAserver.org
-------------------------------------------------------

Awwww.  Just $.25?  Where's the risk there? :)

Cordially yours,
Jerry G. Young II +From Blackberry+
  MCSE (4.0/W2K)
Atlanta EES Implementation Team Lead HHS Engineering Unisys

11493 Sunset Hills Rd.
Reston, VA 20190
Office: 703-579-2727
Cell: 703-625-1468

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE
PROPRIETARY MATERIAL and is thus for use only by the intended
recipient. If you received this in error, please contact the
sender and delete the e-mail and its attachments from all
computers.

-----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx
<isalist-bounce@xxxxxxxxxxxxx>
To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx>
Sent: Wed Mar 22 22:04:52 2006
Subject: [isalist] Re: VPN over the net

http://www.ISAserver.org
-------------------------------------------------------

I'm betting a quarter that Greg is wrong about that.

Greg, you up for the bet?

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
Young, Gerald G
Sent: Wednesday, March 22, 2006 9:02 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN over the net

http://www.ISAserver.org
-------------------------------------------------------

It's a reset of the connection (termination).  If I read that
string properly, it looks the 206 address is resetting the
connection, which is what I think Greg (right person?) was
meaning when he said it looks like a client side issue.

Cordially yours,
Jerry G. Young II +From Blackberry+
  MCSE (4.0/W2K)
Atlanta EES Implementation Team Lead HHS Engineering Unisys

11493 Sunset Hills Rd.
Reston, VA 20190
Office: 703-579-2727
Cell: 703-625-1468

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE
PROPRIETARY MATERIAL and is thus for use only by the intended
recipient. If you received this in error, please contact the
sender and delete the e-mail and its attachments from all
computers.

-----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx
<isalist-bounce@xxxxxxxxxxxxx>
To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx>
Sent: Wed Mar 22 22:03:42 2006
Subject: [isalist] Re: VPN over the net

??



________________________________

From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas
W Shinder
Sent: Wednesday, March 22, 2006 9:22 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN over the net



Bingo:

"98", "22.160985", "206.248.138.108", "67.69.15.20", "TCP",
"60637 > pptp [RST, ACK] Seq=373 Ack=213 Win=0 Len=0"





Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls





        ________________________________

                From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
Andrew English
        Sent: Wednesday, March 22, 2006 8:14 PM
        To: isalist@xxxxxxxxxxxxx
        Subject: RE: [isalist] Re: VPN over the net

        Here is a dump off the ISA server just taken now using
Ethereal. This time I just used the access rule I created for
PPTP and L2PT which gave me the 619 error machine. I looked it
up and several sites say that you need to have port
1723 option
and protocol #47 GRE as well. I don't see any GRE in ISA's
protocol list so I am not sure if it's open by
default or not.



"77", "20.354517", "206.248.138.108", "67.69.15.20",
"TCP",
"60637 > pptp [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1412"
        "78", "20.356294", "67.69.15.20", "206.248.138.108",
"TCP",
"pptp > 60637 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0
MSS=1460"
"79", "20.708283", "206.248.138.108", "67.69.15.20",
"TCP",
"60637 > pptp [ACK] Seq=1 Ack=1 Win=65535 Len=0"
        "80", "20.711863", "206.248.138.108", "67.69.15.20",
"PPTP",
"Start-Control-Connection-Request"
        "81", "20.719783", "67.69.15.20", "206.248.138.108",
"PPTP",
"Start-Control-Connection-Reply"
        "82", "21.109566", "206.248.138.108", "67.69.15.20",
"PPTP",
"Outgoing-Call-Request"
        "83", "21.133715", "67.69.15.20", "206.248.138.108",
"PPTP",
"Outgoing-Call-Reply"
        "84", "21.489766", "206.248.138.108", "67.69.15.20",
"PPTP",
"Set-Link-Info"
        "85", "21.492862", "206.248.138.108", "67.69.15.20",
"PPP LCP",
"Configuration Request"
        "86", "21.514942", "67.69.15.20", "206.248.138.108",
"PPP LCP",
"Configuration Request"
        "87", "21.515068", "67.69.15.20", "206.248.138.108",
"PPP LCP",
"Configuration Ack"
        "88", "21.687898", "67.69.15.20", "206.248.138.108",
"TCP",
"pptp > 60637 [ACK] Seq=189 Ack=349 Win=65187 Len=0"
        "89", "21.881650", "206.248.138.108", "67.69.15.20",
"PPP LCP",
"Configuration Reject"
        "90", "21.881897", "67.69.15.20", "206.248.138.108",
"PPP LCP",
"Configuration Request"
        "91", "21.982027", "206.248.138.108", "67.69.15.20",
"GRE",
"Encapsulated PPP"
        "92", "22.088583", "206.248.138.108", "67.69.15.20",
"PPP LCP",
"Configuration Ack"
        "93", "22.089048", "67.69.15.20", "206.248.138.108",
"PPTP",
"Set-Link-Info"
        "94", "22.090538", "206.248.138.108", "67.69.15.20",
"PPP LCP",
"Identification"
        "95", "22.090965", "206.248.138.108", "67.69.15.20",
"PPP LCP",
"Identification"
        "96", "22.092652", "206.248.138.108", "67.69.15.20",
"PPTP",
"Set-Link-Info"
        "97", "22.102192", "67.69.15.20", "206.248.138.108",
"PPP
CHAP", "Challenge"
        "98", "22.160985", "206.248.138.108", "67.69.15.20",
"TCP",
"60637 > pptp [RST, ACK] Seq=373 Ack=213 Win=0 Len=0"



        Regards,

        Andrew

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our
other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit
http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx




All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx



------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/ articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx





------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com ------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx


Other related posts: