RE: ISA 2004 blocking XP local loopback

  • From: "Young, Gerald G" <Gerald.Young@xxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 14 Jan 2006 13:17:19 -0600

Eric stated he was connecting to a database via IE.  While IE is the client, 
there still needs to be some kind of interface with the database, most likely a 
user or system DSN.  And while the command may not have worked it's 1) easy to 
execute and 2) easy to revert from if it doesn't work.
 
Nothing wrong with testing. :)  Afterall, even if it doesn't work, you now know 
WinHTTP isn't a problem, which allows you to remove it with certainty from the 
realm of possible causes.
 
Cordially yours,
Jerry G. Young II
  MCSE (4.0/W2K)
Atlanta EES Implementation Team Lead
HHS Engineering
Unisys
11493 Sunset Hills Rd.
Reston, VA 20190
Office: 703-579-2727
Cell: 703-625-1468
THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY 
MATERIAL and is thus for use only by the intended recipient. If you received 
this in error, please contact the sender and delete the e-mail and its 
attachments from all computers.

________________________________

From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Sat 1/14/2006 12:11 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback



http://www.ISAserver.org <http://www.ISAserver.org/> 

IE still uses WinInet and proxycfg only affects WinHTTP.
That commands while useful for WinHTTP-based clients (BITS, OL2K3, etc.)
and is completely useless for IE-based connections.

--------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org <http://isatools.org/> 
Read the help / books / articles!
--------------------------------------------

-----Original Message-----
From: Young, Gerald G [mailto:Gerald.Young@xxxxxxxxxx]
Sent: Friday, January 13, 2006 1:06 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org <http://www.ISAserver.org/> 

Eric,

Here's one other thing to try.  At the command prompt, execute the
following command:

proxycfg -p <web proxy ip:port>

If that doesn't work, use the following command to reset it:

proxycfg -d

Cordially yours,
Jerry G. Young II
  MCSE (4.0/W2K)
Atlanta EES Implementation Team Lead
HHS Engineering
Unisys

11493 Sunset Hills Rd.
Reston, VA 20190
Office: 703-579-2727
Cell: 703-625-1468

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you
received this in error, please contact the sender and delete the e-mail
and its attachments from all computers.
-----Original Message-----
From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx]
Sent: Friday, January 13, 2006 3:53 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org <http://www.ISAserver.org/> 

Hmmm, here's what I get, keep in mind that everything else works like it
should.

When I type the del command I get "Could Not Find C:\*array.dll*"

After I reload the script and type the dir command I get "File Not
Found"

Same thing if I change it to "Automatically detect proxy server" and
type dir, I get "File Not Found".

Like I said, everything else is working as it should.  It has to be
getting the correct script changes.  I can see the traffic change from
one ISA to the next as I change script settings.


-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Friday, January 13, 2006 12:27 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org <http://www.ISAserver.org/> 

Nope - that won't work in this case.

Eric, do you know for certain that the browser is getting the wpad
script?
You can tell by:
1. close all IE sessions
2. open a cmd window
3. type 'del \*array.dll* /s'
4. open IE and retry the connection
In the cmd window type 'dir \*array.dll* /s'

..do you see any new scripts?
-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org <http://isatools.org/> 
   Read the help / books / articles!
-------------------------------------------------------


-----Original Message-----
From: Mark Morgan [mailto:MMorgan@xxxxxxxxxxxxxxxxxxxxx]
Sent: Friday, January 13, 2006 12:20
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org <http://www.ISAserver.org/> 


http://support.microsoft.com/kb/262981/?sd=RMVP

Thank You
Mark J Morgan
Palm Drive Hospital
501 Petaluma Ave. Sebastopol, Ca. 95472
Email:    mmorgan@xxxxxxxxxxxxxxxxxxxxx
Voice:    (707) 829-4242
Fax:       (707) 829-4112
Mobile    (707) 849-5576

IMPORTANT Notice: The information contained in this e-mail, including
any attachments or other embedded messages, is legally privileged and
confidential and is intended only for the use of the individual or
entity to whom it is addressed. If the reader of this message is not the
intended recipient or an agent responsible for delivering it to the
intended recipient, you are hereby notified that any viewing,
dissemination, distribution, retransmitting, or copying of this e-mail
message is strictly prohibited. If you have received and/or are viewing
this e-mail in error, please notify the sender immediately by reply
e-mail, and delete this and all copies of this communication from your
systems. Thank you.


-----Original Message-----
From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx]
Sent: Friday, January 13, 2006 12:02 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org <http://www.ISAserver.org/> 

Oops, sorry.
"Use automatic configuration script" is checked and the default address
that ISA creates is in for the address.
Example - ISA 2004 -
http://fchap082.cmcinet.org:8080/array.dll?Get.Routing.Script

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Friday, January 13, 2006 11:57 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org <http://www.ISAserver.org/> 

..and the proxy settings?


-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org <http://isatools.org/> 
   Read the help / books / articles!
-------------------------------------------------------


-----Original Message-----
From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx]
Sent: Friday, January 13, 2006 11:32
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org <http://www.ISAserver.org/> 

It's a local database that is accessed via http://127.0.0.1:8080 
<http://127.0.0.1:8080/>  in IE.
_______________________________________________
Eric Poole, CISSP
Senior Information Security Analyst
Community Medical Centers
1140 "T" Street, Fresno, California 93721
559-459-6784 (phone) 559-459-2045 (fax)


-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Friday, January 13, 2006 11:08 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2004 blocking XP local loopback

http://www.ISAserver.org <http://www.ISAserver.org/> 

What is the application; IE, Firefox, etc.?
What are the proxy settings on that app?


-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org <http://isatools.org/> 
   Read the help / books / articles!
-------------------------------------------------------


-----Original Message-----
From: Eric Poole [mailto:EPoole@xxxxxxxxxxxxxxxxxxxx]
Sent: Friday, January 13, 2006 10:15
To: [ISAserver.org Discussion List]
Subject: [islist] ISA 2004 blocking XP local loopback

http://www.ISAserver.org <http://www.ISAserver.org/> 


Ok, I've been looking for the answer to this for about 45min.  Why would
ISA 2004 block a workstation from getting to 127.0.0.1?  Same
workstation going through ISA 2000 is able to access it's local
loopback.  Someone enlighten me please!

_______________________________________________
Eric Poole, CISSP
Senior Information Security Analyst
Community Medical Centers <http://communitymedical.org/> 1140 "T"
Street, Fresno, California 93721
559-459-6784 (phone) 559-459-2045 (fax)




All mail to and from this domain is GFI-scanned.


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com <http://www.techgenix.com/> 
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
gerald.young@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


Other related posts: