RE: Protocal DENIED

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 8 Feb 2006 18:42:37 -0600

Taking a page from Stefaan Pouseele's playbook -- this indicates a
problem with your network rules. 


Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls


-----Original Message-----
From: Mark Morgan [mailto:mmorgan@xxxxxxxxxxxxxxxxxxxxx] 
Sent: Wednesday, February 08, 2006 6:27 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Protocal DENIED

http://www.ISAserver.org


I have setup a rule to allow port 9100 tcp outbound to a remote site to
site VPN, but the isa server denies the trafic with the log entry below.

Any ideas?

Original Client IP      Service Server Name     Referring Server
Destination Host
Name    MIME Type       Object Source   Client Host Name        Filter
Information     Network
Interface       Raw IP Header   Raw Payload     Processing Time Bytes
Sent    Bytes
Received


        HTTP Status Code        Cache Information       Log Record Type
Log Time        Destination
IP      Destination Port        Protocol        Action  Rule    Client
IP      Client Username Source
Network Destination Network     HTTP Method     URL     Authenticated
Client  Client
Agent   Transport       Source Port     Destination Proxy       Result
Code    Source
Proxy   Bidirectional   Error Information
172.20.0.13             HIPPOCRATES     -               -
-       172.20.0.10     45 00 00 3c 52 a2 40 00 40
06 74 d5 ac 14 00 0d c0 a8 06 7b        a4 bf 23 8c e6 8e 57 45 00 00 00
00 a0 02
16 d0 2d 2e 00 00       0       0       0               0x0     Firewall
2/8/2006 4:10:18
PM      192.168.6.123   9100    9100 OUT        Denied
Connection              172.20.0.13             Internal        HRG Site
to
Site    -       -                       TCP     42175
0xc0040012 FWX_E_NETWORK_RULES_DENIED           No      0x0

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx




Other related posts: