RE: Additional HTTP ports
- From: Alexandre Gauthier <gauthiera@xxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 21 Sep 2005 08:30:25 -0400
Aaaaaah, this would explain the behaviour I experienced, my webmin was over
SSL indeed. Thanks for the tip!
-----Message d'origine-----
De : Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Envoyé : 20 septembre 2005 16:16
À : [ISAserver.org Discussion List]
Objet : [isalist] RE: Additional HTTP ports
http://www.ISAserver.org
If you were, I'd be upset with you.
..for being a bogart, that is...
'tis true that HTTP is not port-specific, although the accepted (and
IANA-registered) port is 80.
'tis also true that so long as the client application is behaving as a web
proxy client, no special action is required of an ISA admin for
non-standard, non-encrypted web sites.
*If*, however, the site in question is serving SSL-based connections on some
port other than 443, *and* the requesting client is behaving as a web proxy
client, then you *must* tell the web proxy about this odd port usage via the
infamous (*more* than famous) ISA tunnel port range script
(http://isatools.org/isa_tpr.js).
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Tuesday, September 20, 2005 11:44 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Additional HTTP ports
http://www.ISAserver.org
Hey Jim,
Can you confirm that I'm not on pot regarding this issue? :-)
Thanks!
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> Sent: Tuesday, September 20, 2005 1:31 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Additional HTTP ports
>
> http://www.ISAserver.org
>
> Woop; dere it is...
>
> -----Original Message-----
> From: Alexandre Gauthier [mailto:gauthiera@xxxxxxxxxxxxxxxxx]
> Sent: Tuesday, September 20, 2005 9:05 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Additional HTTP ports
>
> http://www.ISAserver.org
>
> This reminds me, for the very little time that I have used ISA as an
> *actual* HTTP Proxy/cache (Which you refer to as Web proxy
> clients, unless
> my understanding is flawed) I had a problem regarding those sites.
>
> ISA would refuse to allow HTTP Proxy connections to hosts on
> ports other
> than 80 and 443 -- for instance connecting to webmin (port
> 10000) would
> yield an access denied ISA error page explaining that http on
> non standard
> ports was forbidden. I googled around and the only fix I
> could find was for
> ISA 2000 and involved poking around with the registry...
>
> Is it now working or was it just a misconfiguration issue on
> my end? (That
> was a long while ago, ISA 2004 had been released the previous
> month or so).
>
> I did not fart around with that a lot, it was just a
> practical test for
> kicks, squid was better suited for the environment at that
> time, and it
> would have been wasteful to use ISA 2004 only for that.
>
> -----Message d'origine-----
> De : Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> Envoyé : 20 septembre 2005 11:41
> À : [ISAserver.org Discussion List]
> Objet : [isalist] RE: Additional HTTP ports
>
> http://www.ISAserver.org
>
> Configure the clients as Web proxy clients.
>
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://spaces.msn.com/members/drisa/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
>
>
>
> > -----Original Message-----
> > From: tim.altena@xxxxxxxxxxxxxx [mailto:tim.altena@xxxxxxxxxxxxxx]
> > Sent: Tuesday, September 20, 2005 10:30 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Additional HTTP ports
> >
> > http://www.ISAserver.org
> >
> > What is normal procedure for opening additional ports for
> > HTTP traffic.
> > For instance a web site that uses port 8080 for some of its
> > content. I
> > would still like the traffic to be monitored at http traffic
> > would be I
> > need the additional port opened. Can you define HTTP to additional
> > ports or do I need to create a "new" protocol for it?
> >
> > TIA
> > Tim
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: tshinder@xxxxxxxxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> gauthiera@xxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: jim@xxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> All mail to and from this domain is GFI-scanned.
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gauthiera@xxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
