[isalist] Re: Second connection to certain sites....

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 7 Jan 2007 20:06:59 -0800

http://www.ISAserver.org
-------------------------------------------------------

Neither one of those destination IPs are microsoft. 
Don't' forget; ISA is also a Windows server, and as such will make its own 
occasional connections because of CRL lookups, cache updates, etc.

You'll need more than a couple of log entries to sort this out...

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Taps
Sent: Sunday, January 07, 2007 20:01
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Second connection to certain sites....

Also on 
http://forums.isaserver.org/Second_connection_to_certain_sites%25%25%25%25/m_2002035744/tm.htm

 

 

Can someone tell me why ISA 2006 STD would want to make a second connection to 
a web server from the localhost.....  And then not pull up the page I 
originally asked for???

For instance:
DOOR    2007-01-07    21:53:26    TCP    192.168.69.61:1841    4.71.165.84:80   
 192.168.69.61    Internal    External    Establish    0x0    Allow All Web    
HTTP    N    0    0    0    0    -    -    -    -    -    -    -    -    16    
835    -    -    -    2007-01-07 21:53:26
DOOR    2007-01-07    21:53:26    TCP    66.xx.xxx.xx:34926    4.71.165.84:80   
 66. xx.xxx.xx    Local Host    External    Establish    0x0    -    HTTP    N  
  0    0    0    0    -    -    -    -    -    -    -    -    11    836    -    
-    -    2007-01-07 21:53:26


It doesn't do this for every site.  but one of the main ones it does is 
*.microsoft.com.  So getting windows updates ain't happening.  And since my 
wife found this when trying to go to http://www.llli.org/ I am getting all 
sorts of crap because that one doesn't work either.  

But this isaserver.org, and most of the other site we use do.  Its just a 
handful of them that show this.

I am at a loss.  Anyone have a clue where I should start looking?

 

 

 

--

 

 

Taps@xxxxxxxxxxxx

http://Taps.Iniquity.Org

 

-  "What spirit is so empty and blind, that it cannot recognize the fact that 
the foot is more noble than the shoe, and skin more beautiful than the garment 
with which it is clothed?" -- Michaelangelo  (1475 -1564)

 

-  "Build a man a fire, and he'll be warm for a day. Set a man on fire, and 
he'll be warm for the rest of his life." -- Terry Pratchett (1948 - )

 

-  "Keep away from people who try to belittle your ambitions. Small people 
always do that, but the really great make you feel that you, too, can become 
great." -- Mark Twain (1835 - 1910)

 

 

 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: