RE: Open ports

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 9 Sep 2003 20:01:19 -0500

Hi Paul,

If packet filtering is enabled, the only way those ports will be
available is if you create packet filters or publsihing rules to allow
inbound access to them. BTW, if you have an IMAP port listening on the
server, it sounds like you either have Exchange running on the firewall
(NO!) or you have an IMAP publishing rule (that's cool)

HTH,
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: Paul Crisp [mailto:PCrisp@xxxxxxxxxxxxxxxxx] 
Sent: Tuesday, September 09, 2003 6:24 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Open ports


http://www.ISAserver.org


Ok guys I have run the activeports software on the remote offices ISA
server
and my own.

Basically it appears that the external IP address of each ISA server is
bound to wspsrvr.exe and this is for both ports 25 and 143

Now I would assume this is correct but it still doesn't explain why one
server is blocking portscans on 25 and 143 and the other isn't ?

Paul Crisp
Snr Network Support Analyst


-----Original Message-----
From: Paul Crisp 
Sent: Tuesday, September 09, 2003 11:02 AM
To: [ISAserver.org Discussion List]

http://www.ISAserver.org


Cheers guys I will try all of these suggestions and come back to you

Paul Crisp
Snr Network Support Analyst


-----Original Message-----
From: Gabriel O. Zabal [mailto:gabriel@xxxxxxxxxx] 
Sent: Tuesday, September 09, 2003 11:00 AM
To: [ISAserver.org Discussion List]

http://www.ISAserver.org


You can use this tool to know what service / app is opening those ports.

http://www.webattack.com/get/activeports.shtml 

Also usefull to find binding issues.
Hope it Helps

Gabriel Zabal
gabriel@xxxxxxxxxx

-----Mensaje original-----
De: Paul Crisp [mailto:PCrisp@xxxxxxxxxxxxxxxxx] 
Enviado el: martes, 09 de septiembre de 2003 11:26
Para: [ISAserver.org Discussion List]
Asunto: [isalist] Open ports

http://www.ISAserver.org


Hi,

I have an ISA server located on a remote site. Its running standard
edition
and its been setup as a web proxy, email publishing using exchange 5.5
behind the ISA.

Everything is working fine on the server, but if I do a port scan on the
system it shows SMTP and IMAP4 as open. 
I have taken a look at the settings on my own offices ISA server and it
is
setup exactly the same and these two ports are closed. 

Can anyone point me in the right direction of where to look as I have
checked everything out

Thanks in advance

Paul Crisp
Snr Network Support Analyst



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
gabriel@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
pcrisp@xxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
pcrisp@xxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: