[isalist] Re: VPN over the net

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 23 Mar 2006 07:36:19 -0600

http://www.ISAserver.org
-------------------------------------------------------

UN diversity money.

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx 
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Greg Mulholland
> Sent: Thursday, March 23, 2006 12:51 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: VPN over the net
> 
> http://www.ISAserver.org
> -------------------------------------------------------
>   
>  not a chance until I see the sniff.. On second thoughts  I 
> think I can afford 25c this week. Is that aus money or us 
> money? :) I can always get thor to deposit it in your bank. 
> I'm setting up an accoutn with him!
> 
> Greg
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx <isalist-bounce@xxxxxxxxxxxxx>
> > > To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx>
> > > Sent: Wed Mar 22 22:04:52 2006
> > > Subject: [isalist] Re: VPN over the net
> > > 
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >   
> > > I'm betting a quarter that Greg is wrong about that.
> > > 
> > > Greg, you up for the bet?
> > > 
> > > Thomas W Shinder, M.D.
> > > Site: www.isaserver.org
> > > Blog: http://blogs.isaserver.org/shinder/
> > > Book: http://tinyurl.com/3xqb7
> > > MVP -- ISA Firewalls
> > > 
> > >  
> > > 
> > > > -----Original Message-----
> > > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of 
> Young, Gerald G
> > > > Sent: Wednesday, March 22, 2006 9:02 PM
> > > > To: isalist@xxxxxxxxxxxxx
> > > > Subject: [isalist] Re: VPN over the net
> > > > 
> > > > http://www.ISAserver.org
> > > > -------------------------------------------------------
> > > >   
> > > > It's a reset of the connection (termination).  If I read that 
> > > > string properly, it looks the 206 address is resetting the 
> > > > connection, which is what I think Greg (right person?) 
> was meaning 
> > > > when he said it looks like a client side issue.
> > > > 
> > > > Cordially yours,
> > > > Jerry G. Young II +From Blackberry+
> > > >   MCSE (4.0/W2K)
> > > > Atlanta EES Implementation Team Lead HHS Engineering Unisys
> > > >  
> > > > 11493 Sunset Hills Rd.
> > > > Reston, VA 20190
> > > > Office: 703-579-2727
> > > > Cell: 703-625-1468
> > > > 
> > > > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE 
> > > > PROPRIETARY MATERIAL and is thus for use only by the intended 
> > > > recipient. If you received this in error, please contact the 
> > > > sender and delete the e-mail and its attachments from all
> > computers.
> > > > 
> > > > -----Original Message-----
> > > > From: isalist-bounce@xxxxxxxxxxxxx 
> <isalist-bounce@xxxxxxxxxxxxx>
> > > > To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx>
> > > > Sent: Wed Mar 22 22:03:42 2006
> > > > Subject: [isalist] Re: VPN over the net
> > > > 
> > > > ??
> > > > 
> > > >  
> > > > 
> > > > ________________________________
> > > > 
> > > > From: isalist-bounce@xxxxxxxxxxxxx 
> > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas
> > W Shinder
> > > > Sent: Wednesday, March 22, 2006 9:22 PM
> > > > To: isalist@xxxxxxxxxxxxx
> > > > Subject: [isalist] Re: VPN over the net
> > > > 
> > > >  
> > > > 
> > > > Bingo:
> > > > 
> > > > "98", "22.160985", "206.248.138.108", "67.69.15.20", "TCP",
> > > > "60637 > pptp [RST, ACK] Seq=373 Ack=213 Win=0 Len=0"
> > > > 
> > > >  
> > > > 
> > > >  
> > > > 
> > > > Thomas W Shinder, M.D.
> > > > Site: www.isaserver.org <http://www.isaserver.org/>
> > > > Blog: http://blogs.isaserver.org/shinder/
> > > > Book: http://tinyurl.com/3xqb7
> > > > MVP -- ISA Firewalls
> > > > 
> > > >  
> > > > 
> > > >          
> > > > 
> > > >         ________________________________
> > > > 
> > > >                 From: isalist-bounce@xxxxxxxxxxxxx 
> > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of 
> Andrew English
> > > >         Sent: Wednesday, March 22, 2006 8:14 PM
> > > >         To: isalist@xxxxxxxxxxxxx
> > > >         Subject: RE: [isalist] Re: VPN over the net
> > > > 
> > > >         Here is a dump off the ISA server just taken 
> now using Ethereal. 
> > > > This time I just used the access rule I created for 
> PPTP and L2PT 
> > > > which gave me the 619 error machine. I looked it up and several 
> > > > sites say that you need to have port 1723 option and 
> protocol #47 
> > > > GRE as well. I don't see any GRE in ISA's protocol list so I am 
> > > > not sure if it's open by
> > > default or not. 
> > > > 
> > > >          
> > > > 
> > > >         "77", "20.354517", "206.248.138.108", 
> "67.69.15.20", "TCP", 
> > > > "60637 > pptp [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1412"
> > > >         "78", "20.356294", "67.69.15.20", 
> "206.248.138.108", "TCP", "pptp 
> > > > > 60637 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0
> > > MSS=1460"
> > > >         "79", "20.708283", "206.248.138.108", 
> "67.69.15.20", "TCP", 
> > > > "60637 > pptp [ACK] Seq=1 Ack=1 Win=65535 Len=0"
> > > >         "80", "20.711863", "206.248.138.108", 
> "67.69.15.20", "PPTP", 
> > > > "Start-Control-Connection-Request"
> > > >         "81", "20.719783", "67.69.15.20", 
> "206.248.138.108", "PPTP", 
> > > > "Start-Control-Connection-Reply"
> > > >         "82", "21.109566", "206.248.138.108", 
> "67.69.15.20", "PPTP", 
> > > > "Outgoing-Call-Request"
> > > >         "83", "21.133715", "67.69.15.20", 
> "206.248.138.108", "PPTP", 
> > > > "Outgoing-Call-Reply"
> > > >         "84", "21.489766", "206.248.138.108", 
> "67.69.15.20", "PPTP", 
> > > > "Set-Link-Info"
> > > >         "85", "21.492862", "206.248.138.108", 
> "67.69.15.20", "PPP LCP", 
> > > > "Configuration Request"
> > > >         "86", "21.514942", "67.69.15.20", 
> "206.248.138.108", "PPP LCP", 
> > > > "Configuration Request"
> > > >         "87", "21.515068", "67.69.15.20", 
> "206.248.138.108", "PPP LCP", 
> > > > "Configuration Ack"
> > > >         "88", "21.687898", "67.69.15.20", 
> "206.248.138.108", "TCP", "pptp 
> > > > > 60637 [ACK] Seq=189 Ack=349 Win=65187 Len=0"
> > > >         "89", "21.881650", "206.248.138.108", 
> "67.69.15.20", "PPP LCP", 
> > > > "Configuration Reject"
> > > >         "90", "21.881897", "67.69.15.20", 
> "206.248.138.108", "PPP LCP", 
> > > > "Configuration Request"
> > > >         "91", "21.982027", "206.248.138.108", 
> "67.69.15.20", "GRE", 
> > > > "Encapsulated PPP"
> > > >         "92", "22.088583", "206.248.138.108", 
> "67.69.15.20", "PPP LCP", 
> > > > "Configuration Ack"
> > > >         "93", "22.089048", "67.69.15.20", 
> "206.248.138.108", "PPTP", 
> > > > "Set-Link-Info"
> > > >         "94", "22.090538", "206.248.138.108", 
> "67.69.15.20", "PPP LCP", 
> > > > "Identification"
> > > >         "95", "22.090965", "206.248.138.108", 
> "67.69.15.20", "PPP LCP", 
> > > > "Identification"
> > > >         "96", "22.092652", "206.248.138.108", 
> "67.69.15.20", "PPTP", 
> > > > "Set-Link-Info"
> > > >         "97", "22.102192", "67.69.15.20", 
> "206.248.138.108", "PPP CHAP", 
> > > > "Challenge"
> > > >         "98", "22.160985", "206.248.138.108", 
> "67.69.15.20", "TCP", 
> > > > "60637 > pptp [RST, ACK] Seq=373 Ack=213 Win=0 Len=0"
> > > > 
> > > >          
> > > > 
> > > >         Regards,
> > > > 
> > > >         Andrew
> > > > 
> > > > ------------------------------------------------------
> > > > List Archives: //www.freelists.org/archives/isalist/
> > > > ISA Server Newsletter: 
> > > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server Articles and Tutorials: 
> > > > http://www.isaserver.org/articles_tutorials/
> > > > ISA Server Blogs: http://blogs.isaserver.org/
> > > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > > ------------------------------------------------------
> > > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > > 
> > > > 
> > > > 
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter: 
> > http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials: 
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > 
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter: 
> > http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials: 
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > 
> > > 
> > > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/  
> > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp 
> > ISA Server Articles and Tutorials: 
> > http://www.isaserver.org/articles_tutorials/ 
> > ISA Server Blogs: http://blogs.isaserver.org/ 
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com 
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
> > Report abuse to listadmin@xxxxxxxxxxxxx 
> > 
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/  
> > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp 
> > ISA Server Articles and Tutorials: 
> > http://www.isaserver.org/articles_tutorials/ 
> > ISA Server Blogs: http://blogs.isaserver.org/ 
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com 
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
> > Report abuse to listadmin@xxxxxxxxxxxxx 
> > 
> > 
> > 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/  
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/ 
> ISA Server Blogs: http://blogs.isaserver.org/ 
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com 
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> 
> All mail to and from this domain is GFI-scanned.
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/  
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/ 
> ISA Server Blogs: http://blogs.isaserver.org/ 
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com 
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/  
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
> ISA Server Articles and Tutorials: 
> http://www.isaserver.org/articles_tutorials/ 
> ISA Server Blogs: http://blogs.isaserver.org/ 
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com 
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
> Report abuse to listadmin@xxxxxxxxxxxxx 
> 
> 
> 
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: