RE: Major ISA Security question:

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 23 Feb 2003 11:45:13 -0600

Hi Eddie,
 
ISA Server Web Publishing Rules will use Destination Sets for the
incoming request. This is the FQDN (and optionally a path) that is used
by the external user to access the site. 
 
HTH,
Tom

Thomas W Shinder 
www.isaserver.org/shinder 

        -----Original Message-----
        From: Eddie Kwong [mailto:eddiek@xxxxxxxxxxxx] 
        Sent: Friday, February 21, 2003 3:16 PM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] Major ISA Security question:
        
        
        http://www.ISAserver.org
        
        
        Hi list members, Please help me out here.  
         
        If I understand it right, for someone to publish an internal
server through ISA server, other than other things that needs to be
done, under the ISA server management  you must go to Policy Elements ->
Destination Sets and setup the INTERNAL server location there.  I use
all cap for INTERNAL because this is how I believed ISA server works.
This rule is suppose to be for locating the internal server that has the
web site you would like to publish.
         
        My problem: I have been too busy for the last two months and
didn't get a chance to browse around ISA server for any un-usual events.
This morning when I look, I found out that there is an extra Destination
Set under the Policy Elements->Destination Sets.  With the long name
'Friends Greeting Worm Block Properties', (every work spell as in the
quotes) and the address were a list of 
        *.friend.greeting.com
        *.friend.greetings.com
        207.21.272.104
        64.191.7.4
        cool-downloads.com
         
        etc.....
         
        My 1 millions dollar Question:  What is this?
         
        I am the only one in my organization that setup and manage ISA
server and I didn't put that extra destination set in!!!  
         
        Any ideas?
         
        Many thanks
         
         
         
         
        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Exchange Server Resource Site: http://www.msexchange.org/
        Windows Security Resource Site: http://www.windowsecurity.com/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
        To unsubscribe send a blank email to
$subst('Email.Unsub') 

Other related posts: