RE: Firewall client reacts badly with app
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 19 Mar 2003 19:40:26 -0600
Hi Craig,
What is the site? We need to reproduce the conditions to see what the
problem is.
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Craig [mailto:giarc@xxxxxxxxxx]
Sent: Wednesday, March 19, 2003 5:58 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Firewall client reacts badly with app
http://www.ISAserver.org
Hi,
I am having a problem with an app that we use to get credit information
on
new/existing clients.
The client app is trying to connect to a remote computer on port 8806.
Using SecureNAT (ie without firewall client enabled) I have no problems
connecting to the external host.
I assume then I have correctly setup my protocol rule for this
connection.
As soon as I enable the firewall client, I do not get the desired
connection to the remote host.
After doing a network trace I found that with the Firewall client
enabled
I am recieving "destination unreachable - packet needs to be fragmented
with no fragmentation set" ICMP message back from the ISA Server.
I have tried many different firewall client settings, NameResolution,
NameResolutionForLocalHost,BindRemotePort, and the only one that works
is
disabled :) .
I would like to be able to use groups for acces to the Protocol Rules
for
this application, so I need to get the firewall client to work with
this.
I have tried editing the registry for the dial-up connection I use to
gain
access to my ISP, setting EnablePMTUBHDetect and EnablePMTUDiscover to
try
and combat the destination unreachable error but to no avail.
Hair loss is imminent.
Your help would be much appreciated.
Thanks
Craig
PS: I can supply network traces if needed.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
