RE: SV: RE: Port forwarding with ISA-server

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 18 Jul 2003 07:45:17 -0500

Hi Shawn,

I think I'm the one in need of the quad espresso right now :-)

Thanks!
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Quillman Shawn (RBNA/CIT1.1) * [mailto:Shawn.Quillman@xxxxxxxxxxxx] 
Sent: Friday, July 18, 2003 7:41 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SV: RE: Port forwarding with ISA-server


http://www.ISAserver.org



And here I was thinking I haven't had a decent cup of coffee yet...  whew.

-----
Shawn R. Quillman
Robert Bosch Corporation RBNA/CIT1.1
38000 Hills Tech Drive
Farmington Hills, MI  48331
(248) 553-1164 (P)     (248) 848-2855 (F)
shawn.quillman@xxxxxxxxxxxx


-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Friday, July 18, 2003 8:26 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SV: RE: Port forwarding with ISA-server


http://www.ISAserver.org


Hi Mark,

You're the Eagle eye this morning! :-)

Yes, I meant to write "Server Publishing Rules" not "Protocol Rules"

Protocol Rules won't help at all in this scenario, and they're not required.

Thanks!
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxxxx] 
Sent: Friday, July 18, 2003 7:10 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SV: RE: Port forwarding with ISA-server


http://www.ISAserver.org


Tom, you still need to create a few server publishing rules to apply those
Protocol rules to right ?
With out a server publishing rule isa will block the ports will it not ?

Mark S
----- Original Message ----- 
From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, July 18, 2003 8:02 AM
Subject: [isalist] RE: SV: RE: Port forwarding with ISA-server


http://www.ISAserver.org


Hi Johnny,

Perfect! That is the exact information I needed.

If the vendor is correct about the protocol (which is a 50/50 chance), then
what you need to do:

1. Create the protocol definitions:
- TCP 4262 inbound
- TCP 4711 inbound
- UDP 4672 inbound

2. Create the protocol rules, each protocol rule using one of the new
Protocol Definitions you created. The external addess is on the external
interface of the ISA Server firewall, and the internal address is the
address of the Windows XP client on the internal network.

That's all you need to do. When an external user connects to the external
address of the ISA Server firewall on TCP ports 4262/4711 and UDP port 4672,
those packets will be forwarded to the Windows XP machine on the internal
network.

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp




-----Original Message-----
From: Johnny Lundgren [mailto:johnny@xxxxxxxxxxxxx]
Sent: Friday, July 18, 2003 2:26 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SV: RE: Port forwarding with ISA-server


http://www.ISAserver.org


OK Thomas, I´ll clarify.

I have one ISA server SP1 in integrated mode. 2 NICs are installed in this
server - 1 for the external network (the Internet) and 1 for the internal
network (192.168.x.x).
The XP Pro client is installed on the internal network.
I am not using DHCP.

It is on the XP Pro client an application exist which has to be accessible
by external users (Internet) and according to the application maker, TCP
ports 4262, 4711 and UDP port 4672 have to be forwarded (the incoming
direction) to the client since users on the Internet will otherwise not
see the client. They will only see the servers IP.

I think I am clear about that I have to create some types of packet
filters but I am not sure on how to configure these.

Thanks,

Johny Lundgren

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
strangconst@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
shawn.quillman@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: