Re: Port Ranges

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 21 Oct 2003 08:40:40 -0500

Hi Stuart,

It may in fact be that the app requires secondary connections. I can't
vouch for the authors of the app, but it would make more sense to allow
a single inbound port that the client and server can use to negotiate a
secondary connection. Then the external client connects to the negotiate
port designated as a secondary connection. 

But I'm not a coder so I can't imagine what goes on in these guys heads.
Maybe they think its more secure to allow hundreds of primary
connections to their app?

Thanks!
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Stuart Pittwood [mailto:SPittwood@xxxxxxxxxxxxxxxxx] 
Sent: Tuesday, October 21, 2003 8:22 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Port Ranges


http://www.ISAserver.org

It's a progress application with the database, nameserver, broker, &
agents (it's the agents that uses many ports).

From what I understand, and I'm no progress expert, when a new
connection is made to the database (to query, insert whatever) via
webspeed it picks a port from a certain range and uses that port to
communicate for the duration of that session.  

We have been told by the authors that the range is user definable but
given the traffic levels we're expecting that it would impact
performance if we were to shorten the pool to a more manageable length.

Might be a pain in the ar*e at the moment but from what we've seen at
other law firms it is an impressive piece of software.


-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: 21 October 2003 14:13
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Port Ranges


http://www.ISAserver.org

Hi Stuart,

I'm curious as to what application requires such as large number of
primary connections.

Thanks!
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Stuart Pittwood [mailto:SPittwood@xxxxxxxxxxxxxxxxx] 
Sent: Tuesday, October 21, 2003 7:58 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Port Ranges


http://www.ISAserver.org

Maybe this would be something MS should add? As it means that I have to
now create 100 different protocol definitions.  I know you can do this
on a PIX (not sure about other firewalls)

Anyways off to my isa server

Thanks Jim

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: 21 October 2003 13:49
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Port Ranges


http://www.ISAserver.org

Not if you're referring to a collection of primary connections. What you
need to do in this caase is create each individual protocol definition.
If the protocol uses a single primary port and many secondary ports,
then yes; a single definition can do the job.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Tue, 21 Oct 2003 10:33:44 +0100
 "Stuart Pittwood" <SPittwood@xxxxxxxxxxxxxxxxx> wrote:
http://www.ISAserver.org

Is it possible to create a protocol definition that contains a range of
ports?
 
lets say I wanted to publish a server on the following TCP ports 3202 to
3302 would I need to create 100 different protocol definitions?
 
Regards
 
Stu

A full list of partners in Amery-Parkes is available for inspection at
all of our offices.

Information contained in this e-mail is intended for the use of the
addressee only, and is confidential and may be the subject of Legal
Professional Privilege.  Any dissemination, distribution, copying or use
this communication without prior permission of the addressee is strictly
prohibited.

The contents of an attachment to this email may contain software viruses
which could damage your own computer system.  Whilst Amery-Parkes has
taken every reasonable precaution to minimise this risk, we do not
accept liability for any damage which you sustain as a result of
software viruses.  You should carry out your own virus checks before
opening any attachment to this email.




------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*

All mail from this domain is virus-scanned with RAV.
www.ravantivirus.com

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
spittwood@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
spittwood@xxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: