Sweeeet!! I played till i got it all working. Love the multiple network idea. Ive been pushing/wanting this for a while. Also the idea of creating a separate ruleset for vpn clients is good ja!! Greg Mulholland http://www.isaserver.org <http://www.isaserver.org/> http://isatools.org <http://isatools.org/> http://www.google.com <http://www.google.com/> ________________________________ From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx] Sent: Friday, February 06, 2004 4:55 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Isa2004 beta question http://www.ISAserver.org can i allow all traffic in both directions between the local host and another external host. The problem is, since the connection is on tcp 5050 if i create an protocol definition for that inbound, when i try to use the "create network access rule" for that protocol i cant select inbound protocols in the user-defined. It seems like the ability to allow incoming connections has disappeared on me. Thanks Greg Mulholland http://www.isaserver.org <http://www.isaserver.org/> http://isatools.org <http://isatools.org/> http://www.google.com <http://www.google.com/> ________________________________ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Friday, February 06, 2004 3:57 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: Isa2004 beta question http://www.ISAserver.org Hi Greg, You can create a computer object and then allow inbound access to the local host for the appropriate protocol. However, if you want to log into an ISP, then you want to allow outbound. Of course, the inbound/outbound isn't so clear cut anymore, because you actually use Source/Destination. So the source would be local host and destination is the computer object for the ISP address you need access to. HTH, Tom Thomas W Shinder www.isaserver.org/shinder <http://www.isaserver.org/shinder> ISA Server 2004 Beta - Coming Soon <http://www.microsoft.com/isaserver/beta/default.asp> ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp <http://tinyurl.com/1llp> -----Original Message----- From: Greg Mulholland [mailto:gmulholland@xxxxxxxxxxxxxxx] Sent: Thursday, February 05, 2004 10:40 PM To: [ISAserver.org Discussion List] Subject: [isalist] Isa2004 beta question http://www.ISAserver.org Hey guys having a play with my new toy. Havent as yet found out how to enable access from one particular ip address to the firewall itself. stupid isp login software! anyway i cant seem to create inbound rules for the firewall ie IP Packet Filters as per ISA2000. Anyone who knows it better than i do yet know how i could achieve this. Thanks Greg Mulholland http://www.isaserver.org <http://www.isaserver.org/> http://isatools.org <http://isatools.org/> http://www.google.com <http://www.google.com/> ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: gmulholland@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')