RE: Specifying a Computer but not a user in the access rule
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 31 Aug 2004 23:33:27 -0500
Hi Robert,
There is a system policy that allows the ISA firewall to access DNS from
the local host network to all networks, so there's no reason to add more
rules for that. If you need to allow other hosts to access the DNS
server, then you'll need to add rules to support those connections. For
example, if you want Internal network hosts to connect to the DNS
server, then you'll need to bind the DNS to the Internal address, and
then create a rule allowing Internal to Local Host for the DNS protocol.
HTH,
Tom
-----Original Message-----
From: Robert Abela [mailto:robert@xxxxxxx]
Sent: Tuesday, August 31, 2004 9:06 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Specifying a Computer but not a user in the access
rule
http://www.ISAserver.org
Hi,
I created a rule for a DNS server on the ISA 2K4.
I specified "Allow"
- protocols :"DNS Server" and "DNS"
- From "DNS TEST" (machine name) ip:XXX.XXX.XXX.XXX
- To "External" (whole internet)
This rule is enough so that the test DNS server can access the internet
and query forwarders or no? If I do not specify any users in the users
section of the rule how will this react?
Where can I find more related info to ISA 2K4 please?
regards,
Robert Abela
This mail was checked for malicious code and viruses by GFI
MailSecurity. GFI MailSecurity provides email content checking, exploit
detection, threats analysis and anti-virus for Exchange & SMTP servers.
Viruses, Trojans, dangerous attachments and offensive content are
removed automatically.
Key features include: multiple virus engines; email content and
attachment checking; an exploit shield; an HTML threats engine; a Trojan
& Executable Scanner; and more.
In addition to GFI MailSecurity, GFI also produces the GFI
MailEssentials anti-spam software, the GFI FAXmaker fax server & GFI
LANguard network security product ranges.
For more information on our products, please visit http://www.gfi.com.
This disclaimer was sent by GFI MailEssentials for Exchange/SMTP.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
