RE: Firewall dropping packets from some machines
- From: "Kenny Mann" <Kennymann@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 24 Jan 2005 13:48:34 -0600
Windows XP SP2 (firewall disabled)
Kenny
-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxx]
Sent: Monday, January 24, 2005 1:20 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Firewall dropping packets from some machines
http://www.ISAserver.org
What version of windows (XP Firewall)?
S
_____
From: Kenny Mann [mailto:Kennymann@xxxxxxxxxxx]
Sent: Monday, January 24, 2005 12:40 PM
To: ISA Mailing List
Subject: [isalist] RE: Firewall dropping packets from some machines
http://www.ISAserver.org
Something additional to add, sorry it wasn't in my previous email:
Now, this doesn't just apply to my machine that's having difficulties.
Imagine it like this:
The computer to the right works fine
The computer to the left and middle do not.
All of the above applies to any account that signs on, as if it's an IP
based issues.
I've gone through my DNS entries and cleaned some crap out and checked
what I understood (A records, PTR, etc) and everything looks to be
intact.
Kenny
-----Original Message-----
From: Kenny Mann
Sent: Monday, January 24, 2005 10:30 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Firewall dropping packets from some machines
http://www.ISAserver.org
I'm having some issues that are difficult to pin down what is going on.
I currently use SSH to get out of my network here (work) to get into my
box at home.
I use Putty.
It's not only SSH that has this problem, but it's enough to relate to
right now...
For a while, life was good and it all worked hunkey dory (sp?).
Then out of no where (gasp?) it stopped. More than likely I tweaked a
setting, added a patch, or did something stupid and didn't notice it.
Here is where the fun part comes in.
If I create a Client Address Set and create a protocol rule to allow
full outbound access to whatever I want, it works as if by magic.
However, if I create a protocol rule and allow certain users (such as
myself) full outbound access, it does not work.
When I say it doesn't work, instead of blocking my packets directly, it
just drops them.
What happens is Putty tries to connect, makes the first connection, then
ISA blocks it.
Many other programs are running into the same issues.
I really don't like adding tons of Client Address Set for this because
it just sounds wrong and insecure -- and difficult (DHCP -- except for
our mail server and ISA server).
Has anyone ran into this before?
I've paid to have someone come out here and spend an hour trying to
figure out what the heck is going on, but he couldn't figure it out and
needed more time.
At the time it was only SSH and remote desktop, which I was able to deal
without at the time and live with the CAS method. Now it seems, other
things aren't working that I didn't notcie.
I got MailEssentials for Exchange and it says it fails to update (yes,
it's on the mail server -- which should have godly rights -- and still
doesn't work).
Yes, in the previously paragraph I say the Client Address Set method
doesn't work for that computer and yet in the passage before that one, I
say it works. I should say that it's picky about the machines it wants
to work on.
I have looked at my logs and it shows nothing.
I'm half way tempted to reinstall ISA Server just becuase this is a
little too weird to be a config problem... Thoughts?
Kenny
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kennymann@xxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kennymann@xxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
