RE: Itunes Store Client Blocked?

  • From: "Steve Moffat" <steve@xxxxxxxxxx>
  • To: "ISA Mailing List" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 13 Apr 2005 17:05:45 -0300

Because you haven't done it right. What makes you so sure all the ports
would be TCP.

Check the Itunes support pages for the correct protocols. An allow all
rule, isn't really an allow all rule...:) and should have no place on a
production firewall either.


S 

-----Original Message-----
From: stevec@xxxxxxxxxxx [mailto:stevec@xxxxxxxxxxx] 
Sent: Wednesday, April 13, 2005 12:18 PM
To: ISA Mailing List
Subject: [isalist] Itunes Store Client Blocked?

http://www.ISAserver.org

ISA 2004/EE

Client has ITunes client installed, and is a Firewall client (WinXP).
Client attempts to connect to the ITunes store and gets "store is
unavailable"
message.

ISA Monitoring shows client IP address, destination IP address of
internal ISA NIC, port 1745 "Unidentified IP Traffic" Initated
Connection, and a random port from 6200-6500 "Unidentified IP Traffic"
Denied Connection.

I created a user-defined Protocol called "All TCP Outbound" with a port
range of 1-65535 with no secondary connections and no Application
filters.  

Why can users not connect to this outbound service?

Thanks.



  
  --
  http://www.atomic9.net/


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
isalist@xxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

The haggis is unusual in that it is neither consistently nocturnal nor diurnal, 
but instead is active at dawn and dusk (crepuscular), with occasional forays 
forth during the day and night. 




Other related posts: