I know this is simple but I didn't see it mentioned, after installing and
un-installing the firewall client may have modified the proxy
settings...have you verified that the proxy settings are correct?
Kian
From: "Amy Babinchak" <Amy@xxxxxxxxxxxxxxxxxxxxxxxxxx> Reply-To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Subject: [isalist] RE: ISA server cannot connect to Internet Date: Tue, 16 Sep 2003 08:57:50 -0400
http://www.ISAserver.org
Troy,
The problem is most likely that the Firewall client is installed. Go through and make sure that it is uninstalled for each user, then change the permissions on that folder so that they can't install it again on you. Truth be told if you simply disable it, you should be back in business. Just remember to look at each user. With Terminal server and admin rights it probably got installed for everyone.
I've got a client with a Citrix server and have problems with users installing stuff all the time. Unfortunately one of the apps prevents me from settings the rights to prevent this. But hey, you go with what you got to work with and do the best you can for the client.
Amy
-----Original Message----- From: Troy Armour [mailto:troy@xxxxxxxxxx] Sent: Tuesday, September 16, 2003 8:50 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA server cannot connect to Internet
http://www.ISAserver.org
what are we debating what this site has now???? they do use a firewall-they have a small 3com dial-up router and 3com firewall from the officeconnect family-(they have norton antivirus too incase i forget to mention that-maybe if i forget to say they are sitting on chairs next you'll ASSUME they're standing) and it works well for them-the only stupid thing from my part is their ability to install software-but the boss wants and demands his login be Administrator-he pays my fees-there are no remote users-all (10) are in the one building using compaq evo t20 terminals-the question still remains.....does anyone know what the the solution to the problem is-is the problem the fact they installed the client or is it unrelated.
is this list for people who know the answers to everything or to help ones who might get stuck now and again...
troy
----- Original Message ----- From: "Steve Moffat" <steve@xxxxxxxxxxxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Tuesday, September 16, 2003 1:04 PM Subject: [isalist] RE: ISA server cannot connect to Internet
http://www.ISAserver.org
Hi Troy
You said it was a terminal server, you said nothing about exchange, it's the fact that a firewall is running on a Terminal Services box, which is very stupid. If as you say remote users are using the isa box to surf the net, they get a virus or a worm from some page that they visit, voila that's the firewall compromised and their who;e network has been compromised. It doesn't matter if it's a dial up or not. Your saying in effect that this company doesn't have a firewall at all. That is very stupid.
Also the firewall client should never be installed on the isa server. Permissions should be set on the folder in order that no-one can get access to it.
Is isa a multiple kernel application, I wouldn't have thought so.
-----Original Message----- From: Troy Armour [mailto:troy@xxxxxxxxxx] Sent: Tuesday, September 16, 2003 7:58 AM To: Isa Weblist
http://www.ISAserver.org
thanks greg for the input but the ISA in question is just used as a proxy server on a dial-up connection and thats its primary function not as a firewall. steve jumped to conclusions. it seems that the clients aren't seeing the proxy server at all. if i log in as the Administrator on any terminal i can go online with no problem-but when i log in as a user the browser does the following: in the status bar i see it looking for www.msn.com then in returns the IP address of the site-it then sits at this-after a long time out period i get a DNS error on the page. i know its not a DNS error-the DNS is passing simple and recursive testing and the Administrator user has no DNS problems. all DNS settings are correct-i'm confident of that. my feeling is that when the user installed the firewall client it must've made entries in the registry that didn't get removed on the uninstall. have you any ideas on what these could be? its bugging me at this stage.....
thanks
troy
----- Original Message ----- From: "Greg Mulholland" <gmulholland@xxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Tuesday, September 16, 2003 10:41 AM Subject: [isalist] RE: ISA server cannot connect to Internet
> http://www.ISAserver.org > > > > This is a multi-part message in MIME format. >
------------------------------------------------------------------------ ---- ----
I think the point was more that it shouldn't be done on the firewall. In most cases you should be able to scrounge enough money together for a Pentium and install some sort of firewall, even if it is Linux. Then put all the goodies (SBS, ISA, EX) etc behind it not on it.
More to the point i spose, where is the web traffic breaking down? How far do you get, is it a DNS error or is it ip related. Did you restart the server at all, what does the error message say as well as the firewall logs.
Greg
________________________________
From: Troy Armour [mailto:troy@xxxxxxxxxx] Sent: Tue 9/16/2003 6:46 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA server cannot connect to Internet
http://www.ISAserver.org
I didn't ask for a debate on the what should or shoudl not be done?
But its the small business server server-so you're telling me then when i install the server i cant install exchange because i'm installing the ISA option-hmmmm? funny one that really when it all comes bundled together as it does? anyways i didn't really ask to be ridiculed. SBS is designed for this sort of setup-this company doesn't have the budget to put 2 servers in-then they couldn't run SBS anyway. they have 10 users-and some of them have to have install rights as thats just the way it goes in 2 office companys.
can someone just answer the question if they have any ideas-i haven't seen this problem before.
thanks
troy
----- Original Message ----- From: Steve Moffat <mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx> To: [ISAserver.org Discussion List] <mailto:isalist@xxxxxxxxxxxxx> Sent: Monday, September 15, 2003 10:32 PM Subject: [isalist] RE: ISA server cannot connect to Internet
http://www.ISAserver.org
You are kidding, Terminal Server on a firewall????....lol...heard everything now. Not even locked down so clients can install their own software....rotflol
Uninstall ISA, get separate hardware and reinstall it. NOTHING should be installed on a firewall.
Steve
________________________________
From: Troy Armour [mailto:troy@xxxxxxxxxx] Sent: Monday, September 15, 2003 3:26 PM To: Isa Weblist
http://www.ISAserver.org
hi everyone
just popped over from exchange list with a wee ISA query. i have a company that use ISA server sitting on windows 2000 terminal services. only the administrator can go online from a a terminal. everything was working fine up until a week ago then all stopped-i did notice that one of the users had installed the firewall client on his terminal session-i remember reading somewhere that this is never to be done. what i get now is when a user tries to access a web page he/she gets finding www.website.com then the IP address and then nothing-and the error returned is not an ISA server error. i'm not new to this but his has me stumped. i've all the usual settings correct-but i'm obviously missing something-i uninstalled the firewall client incase it was that but still no joy-id appreciate anyone shedding some light.....
a frustrated irish paddy
------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: steve@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') --------------------------------------- --------------- List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: troy@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')
________________________________
This E-Mail is confidential. It is not intended to be read, copied, disclosed or used by any person other than the recipient named above.
Unauthorised use, disclosure, or copying is strictly prohibited and may be unlawful. Optimum IT Solutions disclaims any liability for any action taken in connection of this E-Mail. The comments or statements expressed in this E-Mail are not necessarily those of Optimum IT Solutions or its subsidiaries or affiliates.
administrator@xxxxxxxxxxxxxxxxxxxxxxxxxx <mailto:administrator@xxxxxxxxxxxxxxxxxxxxxxxxxx> ________________________________
------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------------------------ ---- ----
> ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: troy@xxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub') >
------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: steve@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: troy@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: amy@xxxxxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: kiandavis@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
