http://www.ISAserver.org ------------------------------------------------------- The ISA 2000 "Destination set" has been expanded to allow you more granular control via "URL sets" and "Domain Sets". Which you choose to use is your choice, but there are some concepts to bear in mind: - both URL Sets & Domain Sets apply *only* to traffic handled by the web proxy - URL sets can be applied to *only* HTTP (*not* HTTPS) or FTP traffic - Domain sets can be applied to HTTP, FTP, or HTTPS traffic "Add Site" allows you to choose which technique applies best to your scenario. BTW, you never stated - have you contacted PSS about the 915045 patch? I know for a fact that it fixes one iTunes problem that was reported. Based on the "half the Internet" description you provided, it's a bit difficult to determine if you're seeing the same problem. -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ray Dzek Sent: Saturday, April 08, 2006 10:20 AM To: isalist@xxxxxxxxxxxxx Subject: RE: [isalist] Re: Itunes Problems I love the way that on this list that a simple request for clarification instantly digresses to the "Open Port" joke. As you can tell, I am not really in the mood. It has been the ISA week from hell, and the one group I supposedly can turn to for help has been busy answering my emails for assistance with the same Open Port joke we have all heard over and over again. I never said anything about Open Port or Add Site. That is the verbiage from MS's own support site. For this particular setting, there is no way to add the DNS or "site" for these connections, only the IP addresses that the site resolves to at that moment in time. If the IP addresses change, which would be the case for something like iTunes, which uses outside companies to distribute files, then the compression rules for that "site" will break again. This does not seem like a proper solution. A better or more intuitive alternative would maybe have been the allowance of a destination set, instead of having to use a computer or network set. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx on behalf of Thomas W Shinder Sent: Sat 4/8/2006 6:05 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Itunes Problems Hi John, Indeed - eGore has been a real pain re: the AddSite[Patent Pending]Button. He tried to take the OpenPort[TM] from me too, but I beat him too it. The problem I'm having now is that no one wants to lic the OpenPort[TM] button because everyone thinks that all firewalls and network devices have one -- why would level one to level X network primates tell you to "Open a Port [sic]" Happy spring. Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://blogs.isaserver.org/shinder/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls ________________________________ From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of John T (Lists) Sent: Friday, April 07, 2006 5:43 PM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Itunes Problems The "Add site" button has been temporarily disabled and hidden pending a patent check. I have learned that Al Gore is claiming he holds the patent on it even though the US Government patent office clearly shows the request came from the Good Doctor. In other news, the "Open Port" button is now fully certified and patented for use. John T eServices For You "Seek, and ye shall find!" -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ray Dzek Sent: Friday, April 07, 2006 11:54 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Itunes Problems Umm .. define "Add site". There is no option to add a site, only a network or computer. The solution is to add a new network object with the entire class C for that DNS name, or add each IP that it resolves to? ________________________________ All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx