Re: Help :(

From: "Jim Harrison" <jim@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Date: Sat, 8 Sep 2001 18:41:20 -0700
In preference order:
1. Server publish to an internal server.  As you've noticed, some services on 
the ISA don't play right with server publishing rules (DNS comes to mind).
2. Server publish on the ISA with the app bound only to the internal IP
3. Packet filters with the app bound to all NICs

Jim Harrison
MCP(2K), A+, Network+, PCG

  ----- Original Message ----- 
  From: Mark Strangways 
  To: [ISAserver.org Discussion List] 
  Sent: Saturday, September 08, 2001 5:03 PM
  Subject: [isalist] Re: Help :(


  http://www.ISAserver.org


  I can bind it to the internal address, but that didn't work for me. But then 
again It might have been my incorrect port selection.
  I will try it again, as I suppose it's better to have only the server pub 
rules with there appropriate protocol definitions.
  What is the most secure way ? Other than not using it to begin with :)

  Thanks,

  Mark
    ----- Original Message ----- 
    From: Jim Harrison 
    To: [ISAserver.org Discussion List] 
    Sent: Saturday, September 08, 2001 7:58 PM
    Subject: [isalist] Re: Help :(


    http://www.ISAserver.org


    Yep; unless you can bind the app to only the internal NIC, in which case 
the packet filters are superfluous and server publishing should be just fine.

    Jim Harrison
    MCP(2K), A+, Network+, PCG

      ----- Original Message ----- 
      From: Mark Strangways 
      To: [ISAserver.org Discussion List] 
      Sent: Saturday, September 08, 2001 4:56 PM
      Subject: [isalist] Re: Help :(


      http://www.ISAserver.org


      The app requires 5500,5501,5502,5503 be available .
      I have created 4 Packet filters, and 4 publishing rules, as well as 4 
protocol rules, (inbound).
      I covered all angles, now what should I just need ? The packet filters ?

      regards,

      Mark
        ----- Original Message ----- 
        From: Jim Harrison 
        To: [ISAserver.org Discussion List] 
        Sent: Saturday, September 08, 2001 7:44 PM
        Subject: [isalist] Re: Help :(


        http://www.ISAserver.org


        1. Check your IPEXT...log for refusals; "Blocked"
        2. Check your FWEXT...log for acceptance. "Accept" is inbound, 
"Connect" is outbound.

        Are you sure the app doesn't need secondary connections?  Those aren't 
available in Packet Filters.

        Jim Harrison
        MCP(2K), A+, Network+, PCG

          ----- Original Message ----- 
          From: Mark Strangways 
          To: [ISAserver.org Discussion List] 
          Sent: Saturday, September 08, 2001 1:14 PM
          Subject: [isalist] Help :(


          http://www.ISAserver.org


          Hi all,

          I'm trying to publish a server on my isa box at port 5500... but I 
cannot get it to work.
          I have the server publishing rule in place, and have made packet 
filters.
          But the app doesn't connect and respond to clients, and at this point 
I don't know if ISA is accepting the remote client.

          Any suggestions ?

          Thanks,

          Mark
          ------------------------------------------------------
          You are currently subscribed to this ISAserver.org Discussion List 
as: jim@xxxxxxxxxxxx
          To unsubscribe send a blank email to $subst('Email.Unsub') 
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion List as: 
strangconst@xxxxxxxx
        To unsubscribe send a blank email to $subst('Email.Unsub') 
      ------------------------------------------------------
      You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
      To unsubscribe send a blank email to $subst('Email.Unsub') 
    ------------------------------------------------------
    You are currently subscribed to this ISAserver.org Discussion List as: 
strangconst@xxxxxxxx
    To unsubscribe send a blank email to $subst('Email.Unsub') 
  ------------------------------------------------------
  You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
  To unsubscribe send a blank email to $subst('Email.Unsub')
Re: Help :(

Other related posts:
