We're not talking about NetFininty; we're talking about ISA. What I suggested will (eventually) work; trust me. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver http://isaserver.org/Jim_Harrison http://isatools.org Read the help, books and articles! ----- Original Message ----- From: "Tiago de Aviz" <Tiago@xxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, February 10, 2003 09:24 Subject: [isalist] RES: Re: RES: RE: RES: RE: RES: RE: Spooky filter problem! http://www.ISAserver.org Okay Jim, but think with me: The HLDS (Half-Life Dedicated Server) is na App which runs on my Netfinity's Console. It listens on a static port for incoming connections on port 27016. For some strange reason, it listens on another port, like 60684. each time i restart ISA Services, this service listens on a different port. Even though i don't have any rule that allows incoming connections to port 60684, if a client connects to that port, it Works. If the client connects to port 27016 (which has a rule that allows Access), it doesn't work. Tiago de Aviz ----------------------- tiago@xxxxxxxxxxxxxxx www.softsell.com.br ----------------------- -----Mensagem original----- De: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Enviada em: segunda-feira, 10 de fevereiro de 2003 12:53 Para: [ISAserver.org Discussion List] Assunto: [isalist] Re: RES: RE: RES: RE: RES: RE: Spooky filter problem! http://www.ISAserver.org If Counter-Strike uses any dynamic ports, trying to make it work ON the ISA is going to be a losing proposition. As Steve pointed out, place the CS app on a server behind ISA, install the FW client and use the settings as recommended in the ISA help for "wspcfg.ini". You'll have to monitor the FW logs on ISA to figure out the real ports it uses. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver http://isaserver.org/Jim_Harrison http://isatools.org Read the help, books and articles! ----- Original Message ----- From: "Tiago de Aviz" <Tiago@xxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, February 10, 2003 06:24 Subject: [isalist] RES: RE: RES: RE: RES: RE: Spooky filter problem! http://www.ISAserver.org Steve, did you READ my other messages that i sent? I told that this is an isolated Server. That it is only for fun, not a serious application. What is critical in a Counter-Strike Server? Give me a break, will ya? I don't know why it is so difficult to help me solve an issue... Tiago de Aviz ----------------------- tiago@xxxxxxxxxxxxxxx www.softsell.com.br ----------------------- -----Mensagem original----- De: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx] Enviada em: domingo, 9 de fevereiro de 2003 20:26 Para: [ISAserver.org Discussion List] Assunto: [isalist] RE: RES: RE: RES: RE: Spooky filter problem! http://www.ISAserver.org If you don't know that, then you shouldn't really be a network admin. Steve -----Original Message----- From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] Sent: Sunday, February 09, 2003 8:19 PM To: Isa List Subject: [isalist] RES: RE: RES: RE: Spooky filter problem! http://www.ISAserver.org Will it make any difference? Tiago de Aviz ----------------------- tiago@xxxxxxxxxxxxxxx www.softsell.com.br ----------------------- -----Mensagem original----- De: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxx] Enviada em: domingo, 9 de fevereiro de 2003 18:05 Para: [ISAserver.org Discussion List] Assunto: [isalist] RE: RES: RE: Spooky filter problem! http://www.ISAserver.org Shouldn't do it on the ISA server, install it on another server behind isa. Steve -----Original Message----- From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] Sent: Sunday, February 09, 2003 12:58 AM To: Isa List Subject: [isalist] RES: RE: Spooky filter problem! http://www.ISAserver.org Nope, i'm not joking. But i'm running a HLDS (Counter-strike Server). I host games here. Not the CS client. Tiago de Aviz ----------------------- tiago@xxxxxxxxxxxxxxx www.softsell.com.br ----------------------- -----Mensagem original----- De: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Enviada em: sábado, 8 de fevereiro de 2003 20:13 Para: [ISAserver.org Discussion List] Assunto: [isalist] RE: Spooky filter problem! http://www.ISAserver.org Hi Tiago, Is this a joke? You're running Counter Strike on your firewall? Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Tiago de Aviz [mailto:Tiago@xxxxxxxxxxxxxxx] Sent: Saturday, February 08, 2003 5:19 PM To: [ISAserver.org Discussion List] Subject: [isalist] Spooky filter problem! http://www.ISAserver.org Hey folks, I'm running a Counter-Strike Server on my ISA machine. I allowed Access to all the ports required by the service, inbound and outbound. And i set the Server to run on port 27016 UDP. However, my external users can only Access my Server on port 60684 (the game Server annouces itself to some online game-searching utilities). This port doesn't change each time i restart the service. What is freakin' me out is that i didn't enable Access to this port! I doný have any rule which allows Access to UDP port 60684 on my external interface. However, if I, from the Internal Network here, Access the game Server at port 27016 as it should, it Works! What is going on? Any ideas? Tiago de Aviz ----------------------- tiago@xxxxxxxxxxxxxxx www.softsell.com.br ----------------------- ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tiago@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') This E-Mail is confidential. It is not intended to be read, copied, disclosed or used by any person other than isalist@xxxxxxxxxxxxxx Unauthorised use, disclosure, or copying is strictly prohibited and may be unlawful. Optimum Computer Solutions disclaims any liability for any action taken in connection of this E-Mail. The comments or statements expressed in this E-Mail are not necessarily those of Optimum Computer Solutions or its subsidiaries or affiliates. usermanager@xxxxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tiago@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: steve@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') This E-Mail is confidential. It is not intended to be read, copied, disclosed or used by any person other than isalist@xxxxxxxxxxxxxx Unauthorised use, disclosure, or copying is strictly prohibited and may be unlawful. Optimum Computer Solutions disclaims any liability for any action taken in connection of this E-Mail. The comments or statements expressed in this E-Mail are not necessarily those of Optimum Computer Solutions or its subsidiaries or affiliates. usermanager@xxxxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tiago@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tiago@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')