SV: Re: SV: Re: Java connectivity problems behind ISA

  • From: Jesper Vedholm Hansen <jesper.hansen@xxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 2 Nov 2001 16:29:47 +0100

And no "Site an content rule"

-----Oprindelig meddelelse-----
Fra: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sendt: 2. november 2001 16:34
Til: [ISAserver.org Discussion List]
Emne: [isalist] Re: SV: Re: Java connectivity problems behind ISA


http://www.ISAserver.org


"Access Policy" is a little vague; are we talking packet filters or protocol
rules?  Also, Site & Content rules can get in the way if you have any
restrictions there..

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG

----- Original Message -----
From: "Jesper Vedholm Hansen" <jesper.hansen@xxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, November 02, 2001 07:17
Subject: [isalist] SV: Re: Java connectivity problems behind ISA


http://www.ISAserver.org


Thanks for you answer !, BUT i have an access policy which allow "all ip"
traffic !?

Is "all ip" traffic All or just the one from the "protocol definitions" ??

Best regards
Jesper

-----Oprindelig meddelelse-----
Fra: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sendt: 2. november 2001 16:03
Til: [ISAserver.org Discussion List]
Emne: [isalist] Re: Java connectivity problems behind ISA


http://www.ISAserver.org


Yep, it's your Java app...
If you look in your ISA FW logs, you'll notice some entries like this:
192.168.0.7 Dad iexplore.exe:3:5.1 2001-11-02 14:57:23 HEARTOFGOLD -
193.88.89.52 6882 - - - 6882 TCP Connect 13301 - Allow rule
192.168.0.7 Dad iexplore.exe:3:5.1 2001-11-02 14:57:23 HEARTOFGOLD -
193.88.89.52 8080 - - - 8080 TCP Connect 0 KCLS WebPac Allow rule
192.168.0.7 Dad iexplore.exe:3:5.1 2001-11-02 14:57:23 HEARTOFGOLD -
193.88.89.52 8080 - - - 8080 TCP Connect 0 KCLS WebPac Allow rule

Note that there are two ports being used; 8080 and 6882.  Since I have 8080
open for other reasons, it works, but I don't allow 6882, so it fails with
the "13301" return code.  ..so..
From the FW log, we determine that you need two custom protocols defined and
allowed: TCP-6882 and TCP-8080.  There may be more, btu whomever wrote the
java app should have been able to tell you these things.
Also, whomever wrote the java app should have been using HTTP to those ports
and the web proxy service would have handled that much smoother.

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG

----- Original Message -----
From: "Jesper Vedholm Hansen" <jesper.hansen@xxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Friday, November 02, 2001 06:07
Subject: [isalist] Java connectivity problems behind ISA


http://www.ISAserver.org


Hi

I have som connitivity problems with som specieal java applets when running
them behinf a ISA server, its some special java applets: java login boxes,
java games

I am not able to connect to them

The ISA server is installed as "integrated mode" så its both the gw and the
proxy for the LAN

Examble on nonworking jave applet:
http://spil.tv2.dk/braetkortspil/ click on "Gaesterum" under fx. Whist !

The you wil get an error i the left side of the java vindows with: "unable
to connect to server"

Any suggestions how to fix this ??

Best regards
Jesper

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jesper.hansen@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jesper.hansen@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: