Re: Solaris as SecureNAT client ??

  • From: "Thum Chee Weng, Ronnie" <rthum@xxxxxxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 7 Feb 2002 08:14:13 +0800

task 1: 
i did enable IP routing under ISA config but it stills fails to do a ping to
www.yahoo.com

Does SOCKS need to play a role here since it's non-windows client to the ISA
? 

rgds :-)
- ronnie -

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Wednesday, February 06, 2002 11:51 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Solaris as SecureNAT client ??


http://www.ISAserver.org


Inline...

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!

----- Original Message -----
From: "Thum Chee Weng, Ronnie" <rthum@xxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, February 06, 2002 01:17
Subject: [isalist] Solaris as SecureNAT client ??


http://www.ISAserver.org


I've a Solaris 7 server with the following network setup...
IP: 192.168.25.14
SM: 255.255.255.0
GW: 192.168.25.17

** that's correct

ISA server
Internal interface
IP: 192.168.25.17
SM: 255.255.255.0
GW: -

** good here, too

External interface
IP: 202.187.122.3
SM: 255.255.255.0
GW: 202.187.122.1

** You're batting 1000!

This what I intend to achieve
1. able to ping www.yahoo.com succesfully from the Solaris server

** Make sure "Enable IP routing" is selected in ISA IP packet filtering
properties

2. do a FTP to ftp.sun.com

** More difficult, since secureNAT clients can't use secondary connections.
You'll have to server-publish TCP-20 to the Sun box and only use "PORT 20"
in your FTP conversation;
"PASV" won't work.

3. make a http connection to websites

** Two choices here:
    1. Make only proxy calls to <isaserver>:8080
    2. Set the HTTP redirector to "Send to requested web server" in the
Options tab

How can I achieve all those mentioned ?

rgds :-)
- ronnie -

Virus Tip: BE CAREFUL when opening attachment either from known/unknown
sender.


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
rthum@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: