Hi Shawn, I think I'm the one in need of the quad espresso right now :-) Thanks! Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Quillman Shawn (RBNA/CIT1.1) * [mailto:Shawn.Quillman@xxxxxxxxxxxx] Sent: Friday, July 18, 2003 7:41 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: SV: RE: Port forwarding with ISA-server http://www.ISAserver.org And here I was thinking I haven't had a decent cup of coffee yet... whew. ----- Shawn R. Quillman Robert Bosch Corporation RBNA/CIT1.1 38000 Hills Tech Drive Farmington Hills, MI 48331 (248) 553-1164 (P) (248) 848-2855 (F) shawn.quillman@xxxxxxxxxxxx -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Friday, July 18, 2003 8:26 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: SV: RE: Port forwarding with ISA-server http://www.ISAserver.org Hi Mark, You're the Eagle eye this morning! :-) Yes, I meant to write "Server Publishing Rules" not "Protocol Rules" Protocol Rules won't help at all in this scenario, and they're not required. Thanks! Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Mark Strangways [mailto:strangconst@xxxxxxxxxx] Sent: Friday, July 18, 2003 7:10 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: SV: RE: Port forwarding with ISA-server http://www.ISAserver.org Tom, you still need to create a few server publishing rules to apply those Protocol rules to right ? With out a server publishing rule isa will block the ports will it not ? Mark S ----- Original Message ----- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, July 18, 2003 8:02 AM Subject: [isalist] RE: SV: RE: Port forwarding with ISA-server http://www.ISAserver.org Hi Johnny, Perfect! That is the exact information I needed. If the vendor is correct about the protocol (which is a 50/50 chance), then what you need to do: 1. Create the protocol definitions: - TCP 4262 inbound - TCP 4711 inbound - UDP 4672 inbound 2. Create the protocol rules, each protocol rule using one of the new Protocol Definitions you created. The external addess is on the external interface of the ISA Server firewall, and the internal address is the address of the Windows XP client on the internal network. That's all you need to do. When an external user connects to the external address of the ISA Server firewall on TCP ports 4262/4711 and UDP port 4672, those packets will be forwarded to the Windows XP machine on the internal network. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Johnny Lundgren [mailto:johnny@xxxxxxxxxxxxx] Sent: Friday, July 18, 2003 2:26 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: SV: RE: Port forwarding with ISA-server http://www.ISAserver.org OK Thomas, I´ll clarify. I have one ISA server SP1 in integrated mode. 2 NICs are installed in this server - 1 for the external network (the Internet) and 1 for the internal network (192.168.x.x). The XP Pro client is installed on the internal network. I am not using DHCP. It is on the XP Pro client an application exist which has to be accessible by external users (Internet) and according to the application maker, TCP ports 4262, 4711 and UDP port 4672 have to be forwarded (the incoming direction) to the client since users on the Internet will otherwise not see the client. They will only see the servers IP. I think I am clear about that I have to create some types of packet filters but I am not sure on how to configure these. Thanks, Johny Lundgren ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: strangconst@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: shawn.quillman@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')