[isalist] Re: Limit SMTP connections from several subnets in ISA 2000

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 5 Jan 2007 08:53:07 -0800

Nope; that's not true, either.

SMTP Server Publishing gives you the SMTP  Filter and (with ISA 2000 &
2004), the Message Screecher.

This is far more capable than the "zealot technique".

It's packet filters that are for the "openaport" fuuls and they only
apply to services operating on the ISA itself.

 

Is this an SBS deployment?

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Danny
Sent: Friday, January 05, 2007 8:24 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Limit SMTP connections from several subnets in
ISA 2000

 

Actually Mr. Teacher, can I have that back. I want to say, at the end of
the day, it is the packet filters. :) Server Publishing rules in ISA
2000 are just for all of the "hardware firewall" zealots.

However, in appears as though I can only specify one source subnet per
packet filter. 

...D



On 1/5/07, Danny <nocmonkey@xxxxxxxxx> wrote:

Server publishing, I believe, but ISA 2000 is like MS02 security
bulletins to me.

Thanks,

...D

 

On 1/3/07, Jim Harrison < Jim@xxxxxxxxxxxx <mailto:Jim@xxxxxxxxxxxx> >
wrote:

How is the SMTP service made public; server publishing rules or packet
filters?

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto: isalist-bounce@xxxxxxxxxxxxx
<mailto:isalist-bounce@xxxxxxxxxxxxx> ] On Behalf Of Danny
Sent: Wednesday, January 03, 2007 8:17 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Limit SMTP connections from several subnets in ISA
2000

 

Been awhile since I used ISA 2000... what is the best way to restrict
SMTP connections from several specific Internet IP subnets?

Thanks.

All mail to and from this domain is GFI-scanned.





-- 
CPDE - Certified Petroleum Distribution Engineer
CCBC - Certified Canadian Beer Consumer 




-- 
CPDE - Certified Petroleum Distribution Engineer
CCBC - Certified Canadian Beer Consumer 


All mail to and from this domain is GFI-scanned.

Other related posts: