RE: test
- From: <patricks@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 25 Sep 2001 09:47:00 +0100
Joseph,
In answer to your question re moving files past the internal firewall,
have you considered setting up an FTP server in your internal network
and publish the ftp server on your internal isa to only allow DMZ
machines to upload files to it.
This way you could setup scripts to ftp the logs to your internal server
for processing.
Now I may have helped, can I be cheeky and ask if you are willing to
share any code for analysing ISA/IIS/Event logs with the list ? I am
sure that most people here either have or are considering writing
similar tools.
You never know, with a little collaboration we might even produce a tool
as good as webtrends :-)
Patrick
-----Original Message-----
From: cismic [mailto:cismic@xxxxxxx]
Sent: 25 September 2001 06:27
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: test
http://www.ISAserver.org
Tom,
Things with SMTP can be frustrating! I've not yet activated the
internal mail server yet. Have been learning about all the other things
first. And there are many of the other things.
Right now I've been busy working on programs to parse logs from ISA
machine, a program to read the event log looking for port scans, and a
tool to parse IIS logs. All of the information is then imported into
SQL and I use stored procedures generating data for use in charts and
graphs.
When those are done I'll get started on my mail server! Were still using
external mail servers so installation hasn't been much of an issue yet.
No a quick question. I still need an automated way to pull all that
information off the External ISA machine, my Web server in the DMZ and
get that behind the internal ISA for analysis. Right now I've been
moving it manually. Do you happen to have any ideas on how this could
be automated?
Thank you,
Joseph
-----Original Message-----
From: Thomas W. Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Monday, September 24, 2001 10:02 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: test
http://www.ISAserver.org
Now I'm beginning to see where all the complaints about SMTP publishing
are coming from. Also can't publish NNTP. But Web Publishing works OK.
Perhaps its because I installed SP2 *before* ISA Server. Darned thing
I've ever seen, but make me a lot more compassionate :-)
Thanks!
Tom
www.isaserver.org/shinder
Thomas W Shinder, M.D., MCSE, MCT
-----Original Message-----
From: Thomas W. Shinder
Sent: Monday, September 24, 2001 11:53 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: test
http://www.ISAserver.org
Hi Joseph,
I'm testing a new T1 circuit. Having a heck of a time making SMTP
publishing work correctly. No matter what I do, the packet filter log
shows inbound 25 is blocked. BUT, if I don't publish it, and just create
a packet filter and let the IIS SMTP service listen on the external
interface, and then create a remote domain in the IIS SMTP virtual
server, and then configure the remote domain to use a Smart Host to on
the internal network that relays to the Exchange server (who does not
relay), it seem to work fine.
How's that for layers of security :-)
Thanks!
Tom
Thomas W Shinder, M.D., MCSE, MCT
-----Original Message-----
From: cismic [mailto:cismic@xxxxxxx]
Sent: Monday, September 24, 2001 11:42 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: test
http://www.ISAserver.org
What are you testing this wonderful evening?
Joseph
-----Original Message-----
From: Thomas W. Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Monday, September 24, 2001 9:41 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] test
http://www.ISAserver.org
test
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
patricks@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
