[isalist] Re: VPN over the net
- From: "Steve Moffat" <steve@xxxxxxxxxx>
- To: "ISA Mailing List" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 23 Mar 2006 09:50:22 -0400
http://www.ISAserver.org
-------------------------------------------------------
Sounds like a good gig...I might tear myself away from here also...
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Thomas W Shinder
Sent: Thursday, March 23, 2006 9:36 AM
To: ISA Mailing List
Subject: [isalist] Re: VPN over the net
http://www.ISAserver.org
-------------------------------------------------------
Yee haw! Good times will be had by all.
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> Sent: Thursday, March 23, 2006 12:06 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: VPN over the net
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> I'll be there, too.
> Much Sambuco to be imbibed...
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder
> Sent: Wednesday, March 22, 2006 9:15 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: VPN over the net
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Hi Jerry,
>
> Well, maybe I'll see you at TechEd in Boston this year and we can
> double team the crowd with our tin cups :)
>
> It's a pleasure to have you on this list. A lot of us guys have been
> here for going on six years, so you know we's ain't going nowhere :)
>
> Tom
>
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://blogs.isaserver.org/shinder/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
>
>
>
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Young, Gerald G
> > Sent: Wednesday, March 22, 2006 10:55 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: VPN over the net
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Panhandling?! That strikes me as extremely... Odd. :)
> >
> > And who says I have a real job? :). Could just be a fancy title. ;)
> >
> > If I had a nickle for every time... Well, I guess you can work that
> > one out. :). I, too, depend upon change from generous donors. So,
> > we're a bit of two peas in a pod. :)
> >
> > All joking aside, I must say I greatly admire the effort you and
> > others have given to help our friend Andy out. :D
> >
> > Another list and... Well, you know. :)
> >
> > You guys really are awesome! I'm so glad I joined the list.
> > It has been invaluable. :)
> >
> > Metered listserv anyone? ;)
> >
> > A quarter per message sounds reasonable. :)
> >
> > Cordially yours,
> > Jerry G. Young II +From Blackberry+
> > MCSE (4.0/W2K)
> > Atlanta EES Implementation Team Lead HHS Engineering Unisys
> >
> > 11493 Sunset Hills Rd.
> > Reston, VA 20190
> > Office: 703-579-2727
> > Cell: 703-625-1468
> >
> > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE
> > PROPRIETARY MATERIAL and is thus for use only by the intended
> > recipient. If you received this in error, please contact the sender
> > and delete the e-mail and its attachments from all computers.
> >
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx <isalist-bounce@xxxxxxxxxxxxx>
> > To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx>
> > Sent: Wed Mar 22 23:41:34 2006
> > Subject: [isalist] Re: VPN over the net
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Hi Jerry,
> >
> > You have a real job. I have to carry a cup and beg for change. :)
> >
> > Tom
> >
> > Thomas W Shinder, M.D.
> > Site: www.isaserver.org
> > Blog: http://blogs.isaserver.org/shinder/
> > Book: http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> >
> >
> >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx
> > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Young, Gerald G
> > > Sent: Wednesday, March 22, 2006 9:08 PM
> > > To: isalist@xxxxxxxxxxxxx
> > > Subject: [isalist] Re: VPN over the net
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > Awwww. Just $.25? Where's the risk there? :)
> > >
> > > Cordially yours,
> > > Jerry G. Young II +From Blackberry+
> > > MCSE (4.0/W2K)
> > > Atlanta EES Implementation Team Lead HHS Engineering Unisys
> > >
> > > 11493 Sunset Hills Rd.
> > > Reston, VA 20190
> > > Office: 703-579-2727
> > > Cell: 703-625-1468
> > >
> > > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE
> > > PROPRIETARY MATERIAL and is thus for use only by the intended
> > > recipient. If you received this in error, please contact the
> > > sender and delete the e-mail and its attachments from all
> computers.
> > >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx <isalist-bounce@xxxxxxxxxxxxx>
> > > To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx>
> > > Sent: Wed Mar 22 22:04:52 2006
> > > Subject: [isalist] Re: VPN over the net
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > I'm betting a quarter that Greg is wrong about that.
> > >
> > > Greg, you up for the bet?
> > >
> > > Thomas W Shinder, M.D.
> > > Site: www.isaserver.org
> > > Blog: http://blogs.isaserver.org/shinder/
> > > Book: http://tinyurl.com/3xqb7
> > > MVP -- ISA Firewalls
> > >
> > >
> > >
> > > > -----Original Message-----
> > > > From: isalist-bounce@xxxxxxxxxxxxx
> > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> Young, Gerald G
> > > > Sent: Wednesday, March 22, 2006 9:02 PM
> > > > To: isalist@xxxxxxxxxxxxx
> > > > Subject: [isalist] Re: VPN over the net
> > > >
> > > > http://www.ISAserver.org
> > > > -------------------------------------------------------
> > > >
> > > > It's a reset of the connection (termination). If I read that
> > > > string properly, it looks the 206 address is resetting the
> > > > connection, which is what I think Greg (right person?) was
> > > > meaning when he said it looks like a client side issue.
> > > >
> > > > Cordially yours,
> > > > Jerry G. Young II +From Blackberry+
> > > > MCSE (4.0/W2K)
> > > > Atlanta EES Implementation Team Lead HHS Engineering Unisys
> > > >
> > > > 11493 Sunset Hills Rd.
> > > > Reston, VA 20190
> > > > Office: 703-579-2727
> > > > Cell: 703-625-1468
> > > >
> > > > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE
> > > > PROPRIETARY MATERIAL and is thus for use only by the intended
> > > > recipient. If you received this in error, please contact the
> > > > sender and delete the e-mail and its attachments from all
> > computers.
> > > >
> > > > -----Original Message-----
> > > > From: isalist-bounce@xxxxxxxxxxxxx
> <isalist-bounce@xxxxxxxxxxxxx>
> > > > To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx>
> > > > Sent: Wed Mar 22 22:03:42 2006
> > > > Subject: [isalist] Re: VPN over the net
> > > >
> > > > ??
> > > >
> > > >
> > > >
> > > > ________________________________
> > > >
> > > > From: isalist-bounce@xxxxxxxxxxxxx
> > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas
> > W Shinder
> > > > Sent: Wednesday, March 22, 2006 9:22 PM
> > > > To: isalist@xxxxxxxxxxxxx
> > > > Subject: [isalist] Re: VPN over the net
> > > >
> > > >
> > > >
> > > > Bingo:
> > > >
> > > > "98", "22.160985", "206.248.138.108", "67.69.15.20", "TCP",
> > > > "60637 > pptp [RST, ACK] Seq=373 Ack=213 Win=0 Len=0"
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > Thomas W Shinder, M.D.
> > > > Site: www.isaserver.org <http://www.isaserver.org/>
> > > > Blog: http://blogs.isaserver.org/shinder/
> > > > Book: http://tinyurl.com/3xqb7
> > > > MVP -- ISA Firewalls
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > ________________________________
> > > >
> > > > From: isalist-bounce@xxxxxxxxxxxxx
> > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> Andrew English
> > > > Sent: Wednesday, March 22, 2006 8:14 PM
> > > > To: isalist@xxxxxxxxxxxxx
> > > > Subject: RE: [isalist] Re: VPN over the net
> > > >
> > > > Here is a dump off the ISA server just taken now using
> > > > Ethereal. This time I just used the access rule I created for
> > > > PPTP and L2PT which gave me the 619 error machine. I looked it
> > > > up and several sites say that you need to have port 1723 option
> > > > and protocol #47 GRE as well. I don't see any GRE in ISA's
> > > > protocol list so I am not sure if it's open by
> > > default or not.
> > > >
> > > >
> > > >
> > > > "77", "20.354517", "206.248.138.108", "67.69.15.20", "TCP",
> > > > "60637 > pptp [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1412"
> > > > "78", "20.356294", "67.69.15.20", "206.248.138.108", "TCP",
> > > > "pptp > 60637 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0
> > > MSS=1460"
> > > > "79", "20.708283", "206.248.138.108", "67.69.15.20", "TCP",
> > > > "60637 > pptp [ACK] Seq=1 Ack=1 Win=65535 Len=0"
> > > > "80", "20.711863", "206.248.138.108", "67.69.15.20", "PPTP",
> > > > "Start-Control-Connection-Request"
> > > > "81", "20.719783", "67.69.15.20", "206.248.138.108", "PPTP",
> > > > "Start-Control-Connection-Reply"
> > > > "82", "21.109566", "206.248.138.108", "67.69.15.20", "PPTP",
> > > > "Outgoing-Call-Request"
> > > > "83", "21.133715", "67.69.15.20", "206.248.138.108", "PPTP",
> > > > "Outgoing-Call-Reply"
> > > > "84", "21.489766", "206.248.138.108", "67.69.15.20", "PPTP",
> > > > "Set-Link-Info"
> > > > "85", "21.492862", "206.248.138.108", "67.69.15.20", "PPP LCP",
> > > > "Configuration Request"
> > > > "86", "21.514942", "67.69.15.20", "206.248.138.108", "PPP LCP",
> > > > "Configuration Request"
> > > > "87", "21.515068", "67.69.15.20", "206.248.138.108", "PPP LCP",
> > > > "Configuration Ack"
> > > > "88", "21.687898", "67.69.15.20", "206.248.138.108", "TCP",
> > > > "pptp > 60637 [ACK] Seq=189 Ack=349 Win=65187 Len=0"
> > > > "89", "21.881650", "206.248.138.108", "67.69.15.20", "PPP LCP",
> > > > "Configuration Reject"
> > > > "90", "21.881897", "67.69.15.20", "206.248.138.108", "PPP LCP",
> > > > "Configuration Request"
> > > > "91", "21.982027", "206.248.138.108", "67.69.15.20", "GRE",
> > > > "Encapsulated PPP"
> > > > "92", "22.088583", "206.248.138.108", "67.69.15.20", "PPP LCP",
> > > > "Configuration Ack"
> > > > "93", "22.089048", "67.69.15.20", "206.248.138.108", "PPTP",
> > > > "Set-Link-Info"
> > > > "94", "22.090538", "206.248.138.108", "67.69.15.20", "PPP LCP",
> > > > "Identification"
> > > > "95", "22.090965", "206.248.138.108", "67.69.15.20", "PPP LCP",
> > > > "Identification"
> > > > "96", "22.092652", "206.248.138.108", "67.69.15.20", "PPTP",
> > > > "Set-Link-Info"
> > > > "97", "22.102192", "67.69.15.20", "206.248.138.108", "PPP
> > > > CHAP", "Challenge"
> > > > "98", "22.160985", "206.248.138.108", "67.69.15.20", "TCP",
> > > > "60637 > pptp [RST, ACK] Seq=373 Ack=213 Win=0 Len=0"
> > > >
> > > >
> > > >
> > > > Regards,
> > > >
> > > > Andrew
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: //www.freelists.org/archives/isalist/
> > > > ISA Server Newsletter:
> > > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server Articles and Tutorials:
> > > > http://www.isaserver.org/articles_tutorials/
> > > > ISA Server Blogs: http://blogs.isaserver.org/
> > > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > > ------------------------------------------------------
> > > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > > >
> > > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > >
> > >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
