RE: Any instructions for using isa_tpr.js?
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 7 Oct 2004 11:51:34 -0700
Hi Tom,
Let's complicate things a bit more:
1 - isa_tpr.js is ONLY for use with web proxy applications that request a
"CONNECT" method, not a "GET" method. This is true for
any web-proxy request for SSL sites and some other odd applications.
2 - creating a new "HTTP port" is necessary ONLY if the application is NOT
acting as a web proxy client
Get some captures from the client and / or review your ISA logs and you'll get
a better idea of what's required.
Also, Rob stated he "got some errors" when running the script, but he never
stated what those errors were...
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
----- Original Message -----
From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, October 07, 2004 08:46
Subject: [isalist] RE: Any instructions for using isa_tpr.js?
http://www.ISAserver.org
OK guys,
First, there is no "open port" button and the term is meaningless. When
you open a port, what's supposed to go through it -- "stuff"? That's a
term strickly meant for level 1 help desk guys who are still trying to
figure out the difference between a packet filter and a stateful
application layer inspection firewall.
Now, what do you want to accomplish? Do you want to allow outbound
access to TCP port 81? Well, create a Protocol Definition and then
create a Protocol Rule or Access Rule, depending on the version of ISA
firewall you're using.
HTH,
Tom
www.isaserver.org/shinder <http://www.isaserver.org/shinder>
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
MVP -- ISA Firewalls
________________________________
From: Ara Avvali [mailto:ara@xxxxxxxxxx]
Sent: Thursday, October 07, 2004 10:38 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Any instructions for using isa_tpr.js?
http://www.ISAserver.org
My bad. You are right. Standard ports are hard coded. sorry
________________________________
From: Rob Moore [mailto:RMoore@xxxxxxxx]
Sent: October 7, 2004 11:34 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Any instructions for using isa_tpr.js?
http://www.ISAserver.org
You can't edit the standard HTTP protocol. It gives you only port 80.
I've already created an HTTP protocol using port 81, but I believe (and
someone can correct me if I'm wrong) that because it's a non-standard
port you have to go through some extra shenanigans to add it. For
example, when I wanted to open a non-standard port for SSL (6445), I had
to run the script ssl_tpr_add.js, modified for the port I needed. Am I
wrong about this? Just adding a user-defined protocol for port 81 didn't
do the trick.
Thanks,
Rob
________________________________
From: Ara Avvali [mailto:ara@xxxxxxxxxx]
Sent: Thursday, October 07, 2004 11:21 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Any instructions for using isa_tpr.js?
http://www.ISAserver.org
Go to your firewall policy, click on protocols, go down to web and http,
right click and go properties then you can change the default port
settings
Or
Just create a new one based on what you need using new menu
________________________________
From: Rob Moore [mailto:RMoore@xxxxxxxx]
Sent: October 7, 2004 11:13 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Any instructions for using isa_tpr.js?
http://www.ISAserver.org
I'm trying to open up a non-standard port for HTTP (81). I downloaded
isa_tpr.js from isatools.org, but I keep getting errors of various sorts
when I try to input data into the script and run it. Can anyone tell me
either where I can find out how to do it correctly, or how to do it
correctly?
Thanks,
Rob
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
rmoore@xxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ara@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
