[isalist] Re: NTP and ISA 2004
- From: "Taps" <Taps@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Tue, 19 Sep 2006 12:08:07 -0400
http://www.ISAserver.org
-------------------------------------------------------
Not the single IP address... put all of those into a destination set,
and allow access to there.
Look in the logging tab and find out why it is being denied. I am
betting that you are putting in one IP, and it is trying to use another.
If not, then at least the live log will point you in the right
direction.
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Bret Hanson
Sent: Tuesday, September 19, 2006 11:57 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: NTP and ISA 2004
http://www.ISAserver.org
-------------------------------------------------------
I changed the FQDN to a single IP address and I still get denied
Connection. I also put this rule at the top of the firewall policy.
Any other suggestions - I'm running out of things to try...
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thor (Hammer of God)
Sent: Tuesday, September 19, 2006 9:58 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: NTP and ISA 2004
http://www.ISAserver.org
-------------------------------------------------------
That was a smart thing to do...
t
On 9/19/06 5:33 AM, "Chris Patterson" <Chris.Patterson@xxxxxxxxxxx>
spoketh to all:
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Instead of using the FQDN, use the IP addresses listed from a
NSLOOKUP.
> When I went to see what IP it was, I get the following information:
>
> Non-authoritative answer:
> pool.ntp.org internet address = 66.98.194.91
> pool.ntp.org internet address = 212.12.50.232
> pool.ntp.org internet address = 81.169.171.179
> pool.ntp.org internet address = 62.163.10.181
> pool.ntp.org internet address = 193.11.184.180
> pool.ntp.org internet address = 82.137.161.146
> pool.ntp.org internet address = 84.16.230.215
> pool.ntp.org internet address = 84.16.227.201
> pool.ntp.org internet address = 138.236.128.118
> pool.ntp.org nameserver = ns1.us.bitnames.com
> pool.ntp.org nameserver = zbasel.fortytwo.ch
> pool.ntp.org nameserver = aventura.bhms-groep.nl
> pool.ntp.org nameserver = usenet.net.nz
> pool.ntp.org nameserver = ns1.mailworx.net
> pool.ntp.org
>
> --
>
> Chris Patterson
>
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Bret Hanson
> Sent: Monday, September 18, 2006 5:29 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] NTP and ISA 2004
>
> I'm trying to get ISA 2004 EE to allow our time server to talk to
> pool.ntp.org.
>
> I have an Allow rule set up:
> Protocol: NTP(UDP) | From: TIMESERVER | To: pool.ntp.org | Condition:
> All Users
>
> Also, in the System Policy I have NTP set to enable and under the To
> tab I have it set to the TIMESERVER.
>
> When I start logging to test the rule, I get: Denied Connection -
> [Enterprise] Default Rule.
>
> Seems to me this should work but ISA thinks differently.
>
> Thanks for any help,
>
> Bret Hanson
> Systems Administrator
> Yunker Industries, Inc.
>
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
