And no "Site an content rule" -----Oprindelig meddelelse----- Fra: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sendt: 2. november 2001 16:34 Til: [ISAserver.org Discussion List] Emne: [isalist] Re: SV: Re: Java connectivity problems behind ISA http://www.ISAserver.org "Access Policy" is a little vague; are we talking packet filters or protocol rules? Also, Site & Content rules can get in the way if you have any restrictions there.. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG ----- Original Message ----- From: "Jesper Vedholm Hansen" <jesper.hansen@xxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, November 02, 2001 07:17 Subject: [isalist] SV: Re: Java connectivity problems behind ISA http://www.ISAserver.org Thanks for you answer !, BUT i have an access policy which allow "all ip" traffic !? Is "all ip" traffic All or just the one from the "protocol definitions" ?? Best regards Jesper -----Oprindelig meddelelse----- Fra: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sendt: 2. november 2001 16:03 Til: [ISAserver.org Discussion List] Emne: [isalist] Re: Java connectivity problems behind ISA http://www.ISAserver.org Yep, it's your Java app... If you look in your ISA FW logs, you'll notice some entries like this: 192.168.0.7 Dad iexplore.exe:3:5.1 2001-11-02 14:57:23 HEARTOFGOLD - 193.88.89.52 6882 - - - 6882 TCP Connect 13301 - Allow rule 192.168.0.7 Dad iexplore.exe:3:5.1 2001-11-02 14:57:23 HEARTOFGOLD - 193.88.89.52 8080 - - - 8080 TCP Connect 0 KCLS WebPac Allow rule 192.168.0.7 Dad iexplore.exe:3:5.1 2001-11-02 14:57:23 HEARTOFGOLD - 193.88.89.52 8080 - - - 8080 TCP Connect 0 KCLS WebPac Allow rule Note that there are two ports being used; 8080 and 6882. Since I have 8080 open for other reasons, it works, but I don't allow 6882, so it fails with the "13301" return code. ..so.. From the FW log, we determine that you need two custom protocols defined and allowed: TCP-6882 and TCP-8080. There may be more, btu whomever wrote the java app should have been able to tell you these things. Also, whomever wrote the java app should have been using HTTP to those ports and the web proxy service would have handled that much smoother. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG ----- Original Message ----- From: "Jesper Vedholm Hansen" <jesper.hansen@xxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, November 02, 2001 06:07 Subject: [isalist] Java connectivity problems behind ISA http://www.ISAserver.org Hi I have som connitivity problems with som specieal java applets when running them behinf a ISA server, its some special java applets: java login boxes, java games I am not able to connect to them The ISA server is installed as "integrated mode" så its both the gw and the proxy for the LAN Examble on nonworking jave applet: http://spil.tv2.dk/braetkortspil/ click on "Gaesterum" under fx. Whist ! The you wil get an error i the left side of the java vindows with: "unable to connect to server" Any suggestions how to fix this ?? Best regards Jesper ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jesper.hansen@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jesper.hansen@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')