RE: OT - ISA 2004 access rules yahoo/poker games
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 7 Mar 2006 14:48:30 -0600
There has to be something there. Make sure that information is being
logged.
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
MVP -- ISA Firewalls
________________________________
From: Neil Cassidy [mailto:ncassidy@xxxxxxxxxxxxx]
Sent: Tuesday, March 07, 2006 2:46 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OT - ISA 2004 access rules yahoo/poker games
http://www.ISAserver.org
That column is blank. Nothing gets added when I try again.
________________________________
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
Sent: Tuesday, March 07, 2006 3:32 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OT - ISA 2004 access rules yahoo/poker games
http://www.ISAserver.org
Neil,
Enable the Filter Information column to see what setting might have
triggered the block.
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
MVP -- ISA Firewalls
________________________________
From: Neil Cassidy [mailto:ncassidy@xxxxxxxxxxxxx]
Sent: Tuesday, March 07, 2006 2:28 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OT - ISA 2004 access rules yahoo/poker games
http://www.ISAserver.org
Yes, I tried that. Here is a post: ((how do I get this in a more
readable format? If I paste it to notepad it looks fine, but here not.
Are attachments allowed at this list?)
0.0.0.0 MyAgent No Proxy PS01 195.10.46.40 TCP - - - - - - 0 234
2244 228 12202 The ISA Server denied the specified Uniform Resource
Locator (URL). 0x44 0x0 Web Proxy Filter 3/7/2006 3:20:49 PM
195.10.46.40 80 http Denied Connection SBS Internet Access Rule
192.168.16.24 anonymous Internal External GET
http://195.10.46.40/Downloads/vcc/upgradePG91-92man.exe
0.0.0.0 MyAgent No Proxy PS01 195.10.46.40 TCP - - - - - - 0 1 2244
228 12202 The ISA Server denied the specified Uniform Resource Locator
(URL). 0x44 0x800 Web Proxy Filter 3/7/2006 3:20:49 PM 195.10.46.40 80
http Denied Connection SBS Internet Access Rule 192.168.16.24 anonymous
Internal External GET
http://195.10.46.40/Downloads/vcc/upgradepp91-92man.exe
0.0.0.0 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR
1.1.4322) No Proxy PS01 66.212.229.233 TCP - - - - - - 0 47 2244
333 12202 The ISA Server denied the specified Uniform Resource Locator
(URL). 0x0 0x0 Web Proxy Filter 3/7/2006 3:20:51 PM 66.212.229.233 80
http Denied Connection SBS Internet Access Rule 192.168.16.24 anonymous
Internal External GET http://66.212.229.233/download.htm?wm=2565141
________________________________
From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, March 07, 2006 3:17 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: OT - ISA 2004 access rules yahoo/poker games
http://www.ISAserver.org
Neil,
The monitoring section of the MMS is your friend. Go there, move to the
Logging tab. Click on Start Query. Run over to a PC, attempt to open one
of the sites that you can't get to. Run back over to the server, click
Stop Query. Look in the list of packets for the one that was denied.
It'll tell you which rule is preventing the viewing of this site. Post
the info here if you can't figure it out.
Amy
Harbor Computer Services
Small Business Computer Specialists
Client Blog: http://smalltechnotes.blogspot.com/
Tech Blog: http://isainsbs.blogspot.com/
Website: http://www.harborcomputerservices.net/
________________________________
From: Neil Cassidy [mailto:ncassidy@xxxxxxxxxxxxx]
Sent: Tuesday, March 07, 2006 2:50 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] OT - ISA 2004 access rules yahoo/poker games
http://www.ISAserver.org
On SBS2k3 prem - OK, I actually think I got ISA to allow these programs
to work, but somehow I have at the same time blocked access to the
sites. I added the sites for direct access, that did not work, then
found out the exact protocol and IP address and created an access rule
for that (and deleted the direct access by domain name). Now it seems
to want to work, but now the domain site itself is banned by ISA (I can
not even go there in IE like I could before). So I think that by
deleting the direct access rule or some other thing I did, I am now NOT
allowing access to the site. I get the 403 forbidden error. But all I
ever did was add the domain/IP and then delete it. Any ideas? Maybe I
should rerun the CEICW again and then start fresh?
I have also just purchased Toms book, but will not have it for a few
days, so the dumb questions will continue....
Thanks.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
amy@xxxxxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ncassidy@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ncassidy@xxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
