[isalist] Re: VPN over the net
- From: "Steve Moffat" <steve@xxxxxxxxxx>
- To: "ISA Mailing List" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 23 Mar 2006 14:47:27 -0400
You NEED to change one of the subnets.
S
________________________________
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andrew English
Sent: Thursday, March 23, 2006 2:56 PM
To: ISA Mailing List
Subject: RE: [isalist] Re: VPN over the net
I guess you missed the posting Jim about how I manage to get it working
with my XP Pro client after I hooked a router between the modem, and
ISA, connecting my station to the router and giving it an IP address of
10.0.0.x. But also blame the problem problem on the VPN network IP being
on the same subnet as my own network. 192.168.1.x
Regards,
Andrew
________________________________
From: isalist-bounce@xxxxxxxxxxxxx on behalf of Jim Harrison
Sent: Thu 23/03/2006 9:52 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: VPN over the net
http://www.ISAserver.org
-------------------------------------------------------
Nah - we just don't get together much...
I've known Tom for ~6 years and we've only actually been in each other's
presence about that many times...
Where's dem craptures, Andy?
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Andrew English
Sent: Thursday, March 23, 2006 6:38 AM
To: isalist@xxxxxxxxxxxxx
Subject: RE: [isalist] Re: VPN over the net
From what I have seen in the past 8 hours here it would seem that you
guys don't get out much. ;)
Regards,
Andrew
________________________________
From: isalist-bounce@xxxxxxxxxxxxx on behalf of Steve Moffat
Sent: Thu 23/03/2006 8:50 AM
To: ISA Mailing List
Subject: [isalist] Re: VPN over the net
http://www.ISAserver.org
-------------------------------------------------------
Sounds like a good gig...I might tear myself away from here also...
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Sent: Thursday, March 23, 2006 9:36 AM
To: ISA Mailing List
Subject: [isalist] Re: VPN over the net
http://www.ISAserver.org
-------------------------------------------------------
Yee haw! Good times will be had by all.
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> Sent: Thursday, March 23, 2006 12:06 AM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: VPN over the net
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> I'll be there, too.
> Much Sambuco to be imbibed...
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas W Shinder
> Sent: Wednesday, March 22, 2006 9:15 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] Re: VPN over the net
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Hi Jerry,
>
> Well, maybe I'll see you at TechEd in Boston this year and we can
> double team the crowd with our tin cups :)
>
> It's a pleasure to have you on this list. A lot of us guys have been
> here for going on six years, so you know we's ain't going nowhere :)
>
> Tom
>
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://blogs.isaserver.org/shinder/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
>
>
>
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Young, Gerald G
> > Sent: Wednesday, March 22, 2006 10:55 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: VPN over the net
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Panhandling?! That strikes me as extremely... Odd. :)
> >
> > And who says I have a real job? :). Could just be a fancy title. ;)
> >
> > If I had a nickle for every time... Well, I guess you can work that
> > one out. :). I, too, depend upon change from generous donors. So,
> > we're a bit of two peas in a pod. :)
> >
> > All joking aside, I must say I greatly admire the effort you and
> > others have given to help our friend Andy out. :D
> >
> > Another list and... Well, you know. :)
> >
> > You guys really are awesome! I'm so glad I joined the list.
> > It has been invaluable. :)
> >
> > Metered listserv anyone? ;)
> >
> > A quarter per message sounds reasonable. :)
> >
> > Cordially yours,
> > Jerry G. Young II +From Blackberry+
> > MCSE (4.0/W2K)
> > Atlanta EES Implementation Team Lead HHS Engineering Unisys
> >
> > 11493 Sunset Hills Rd.
> > Reston, VA 20190
> > Office: 703-579-2727
> > Cell: 703-625-1468
> >
> > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE
> > PROPRIETARY MATERIAL and is thus for use only by the intended
> > recipient. If you received this in error, please contact the sender
> > and delete the e-mail and its attachments from all computers.
> >
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx <isalist-bounce@xxxxxxxxxxxxx>
> > To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx>
> > Sent: Wed Mar 22 23:41:34 2006
> > Subject: [isalist] Re: VPN over the net
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Hi Jerry,
> >
> > You have a real job. I have to carry a cup and beg for change. :)
> >
> > Tom
> >
> > Thomas W Shinder, M.D.
> > Site: www.isaserver.org
> > Blog: http://blogs.isaserver.org/shinder/
> > Book: http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> >
> >
> >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx
> > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Young, Gerald G
> > > Sent: Wednesday, March 22, 2006 9:08 PM
> > > To: isalist@xxxxxxxxxxxxx
> > > Subject: [isalist] Re: VPN over the net
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > Awwww. Just $.25? Where's the risk there? :)
> > >
> > > Cordially yours,
> > > Jerry G. Young II +From Blackberry+
> > > MCSE (4.0/W2K)
> > > Atlanta EES Implementation Team Lead HHS Engineering Unisys
> > >
> > > 11493 Sunset Hills Rd.
> > > Reston, VA 20190
> > > Office: 703-579-2727
> > > Cell: 703-625-1468
> > >
> > > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE
> > > PROPRIETARY MATERIAL and is thus for use only by the intended
> > > recipient. If you received this in error, please contact the
> > > sender and delete the e-mail and its attachments from all
> computers.
> > >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx <isalist-bounce@xxxxxxxxxxxxx>
> > > To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx>
> > > Sent: Wed Mar 22 22:04:52 2006
> > > Subject: [isalist] Re: VPN over the net
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > I'm betting a quarter that Greg is wrong about that.
> > >
> > > Greg, you up for the bet?
> > >
> > > Thomas W Shinder, M.D.
> > > Site: www.isaserver.org
> > > Blog: http://blogs.isaserver.org/shinder/
> > > Book: http://tinyurl.com/3xqb7
> > > MVP -- ISA Firewalls
> > >
> > >
> > >
> > > > -----Original Message-----
> > > > From: isalist-bounce@xxxxxxxxxxxxx
> > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> Young, Gerald G
> > > > Sent: Wednesday, March 22, 2006 9:02 PM
> > > > To: isalist@xxxxxxxxxxxxx
> > > > Subject: [isalist] Re: VPN over the net
> > > >
> > > > http://www.ISAserver.org
> > > > -------------------------------------------------------
> > > >
> > > > It's a reset of the connection (termination). If I read that
> > > > string properly, it looks the 206 address is resetting the
> > > > connection, which is what I think Greg (right person?) was
> > > > meaning when he said it looks like a client side issue.
> > > >
> > > > Cordially yours,
> > > > Jerry G. Young II +From Blackberry+
> > > > MCSE (4.0/W2K)
> > > > Atlanta EES Implementation Team Lead HHS Engineering Unisys
> > > >
> > > > 11493 Sunset Hills Rd.
> > > > Reston, VA 20190
> > > > Office: 703-579-2727
> > > > Cell: 703-625-1468
> > > >
> > > > THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE
> > > > PROPRIETARY MATERIAL and is thus for use only by the intended
> > > > recipient. If you received this in error, please contact the
> > > > sender and delete the e-mail and its attachments from all
> > computers.
> > > >
> > > > -----Original Message-----
> > > > From: isalist-bounce@xxxxxxxxxxxxx
> <isalist-bounce@xxxxxxxxxxxxx>
> > > > To: isalist@xxxxxxxxxxxxx <isalist@xxxxxxxxxxxxx>
> > > > Sent: Wed Mar 22 22:03:42 2006
> > > > Subject: [isalist] Re: VPN over the net
> > > >
> > > > ??
> > > >
> > > >
> > > >
> > > > ________________________________
> > > >
> > > > From: isalist-bounce@xxxxxxxxxxxxx
> > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thomas
> > W Shinder
> > > > Sent: Wednesday, March 22, 2006 9:22 PM
> > > > To: isalist@xxxxxxxxxxxxx
> > > > Subject: [isalist] Re: VPN over the net
> > > >
> > > >
> > > >
> > > > Bingo:
> > > >
> > > > "98", "22.160985", "206.248.138.108", "67.69.15.20", "TCP",
> > > > "60637 > pptp [RST, ACK] Seq=373 Ack=213 Win=0 Len=0"
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > Thomas W Shinder, M.D.
> > > > Site: www.isaserver.org <http://www.isaserver.org/>
> > > > Blog: http://blogs.isaserver.org/shinder/
> > > > Book: http://tinyurl.com/3xqb7
> > > > MVP -- ISA Firewalls
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > ________________________________
> > > >
> > > > From: isalist-bounce@xxxxxxxxxxxxx
> > > > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of
> Andrew English
> > > > Sent: Wednesday, March 22, 2006 8:14 PM
> > > > To: isalist@xxxxxxxxxxxxx
> > > > Subject: RE: [isalist] Re: VPN over the net
> > > >
> > > > Here is a dump off the ISA server just taken now using
> > > > Ethereal. This time I just used the access rule I created for
> > > > PPTP and L2PT which gave me the 619 error machine. I looked it
> > > > up and several sites say that you need to have port 1723 option
> > > > and protocol #47 GRE as well. I don't see any GRE in ISA's
> > > > protocol list so I am not sure if it's open by
> > > default or not.
> > > >
> > > >
> > > >
> > > > "77", "20.354517", "206.248.138.108", "67.69.15.20",
"TCP",
> > > > "60637 > pptp [SYN] Seq=0 Ack=0 Win=65535 Len=0 MSS=1412"
> > > > "78", "20.356294", "67.69.15.20", "206.248.138.108",
"TCP",
> > > > "pptp > 60637 [SYN, ACK] Seq=0 Ack=1 Win=16384 Len=0
> > > MSS=1460"
> > > > "79", "20.708283", "206.248.138.108", "67.69.15.20",
"TCP",
> > > > "60637 > pptp [ACK] Seq=1 Ack=1 Win=65535 Len=0"
> > > > "80", "20.711863", "206.248.138.108", "67.69.15.20",
"PPTP",
> > > > "Start-Control-Connection-Request"
> > > > "81", "20.719783", "67.69.15.20", "206.248.138.108",
"PPTP",
> > > > "Start-Control-Connection-Reply"
> > > > "82", "21.109566", "206.248.138.108", "67.69.15.20",
"PPTP",
> > > > "Outgoing-Call-Request"
> > > > "83", "21.133715", "67.69.15.20", "206.248.138.108",
"PPTP",
> > > > "Outgoing-Call-Reply"
> > > > "84", "21.489766", "206.248.138.108", "67.69.15.20",
"PPTP",
> > > > "Set-Link-Info"
> > > > "85", "21.492862", "206.248.138.108", "67.69.15.20",
"PPP LCP",
> > > > "Configuration Request"
> > > > "86", "21.514942", "67.69.15.20", "206.248.138.108",
"PPP LCP",
> > > > "Configuration Request"
> > > > "87", "21.515068", "67.69.15.20", "206.248.138.108",
"PPP LCP",
> > > > "Configuration Ack"
> > > > "88", "21.687898", "67.69.15.20", "206.248.138.108",
"TCP",
> > > > "pptp > 60637 [ACK] Seq=189 Ack=349 Win=65187 Len=0"
> > > > "89", "21.881650", "206.248.138.108", "67.69.15.20",
"PPP LCP",
> > > > "Configuration Reject"
> > > > "90", "21.881897", "67.69.15.20", "206.248.138.108",
"PPP LCP",
> > > > "Configuration Request"
> > > > "91", "21.982027", "206.248.138.108", "67.69.15.20",
"GRE",
> > > > "Encapsulated PPP"
> > > > "92", "22.088583", "206.248.138.108", "67.69.15.20",
"PPP LCP",
> > > > "Configuration Ack"
> > > > "93", "22.089048", "67.69.15.20", "206.248.138.108",
"PPTP",
> > > > "Set-Link-Info"
> > > > "94", "22.090538", "206.248.138.108", "67.69.15.20",
"PPP LCP",
> > > > "Identification"
> > > > "95", "22.090965", "206.248.138.108", "67.69.15.20",
"PPP LCP",
> > > > "Identification"
> > > > "96", "22.092652", "206.248.138.108", "67.69.15.20",
"PPTP",
> > > > "Set-Link-Info"
> > > > "97", "22.102192", "67.69.15.20", "206.248.138.108",
"PPP
> > > > CHAP", "Challenge"
> > > > "98", "22.160985", "206.248.138.108", "67.69.15.20",
"TCP",
> > > > "60637 > pptp [RST, ACK] Seq=373 Ack=213 Win=0 Len=0"
> > > >
> > > >
> > > >
> > > > Regards,
> > > >
> > > > Andrew
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: //www.freelists.org/archives/isalist/
> > > > ISA Server Newsletter:
> > > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server Articles and Tutorials:
> > > > http://www.isaserver.org/articles_tutorials/
> > > > ISA Server Blogs: http://blogs.isaserver.org/
> > > > ------------------------------------------------------
> > > > Visit TechGenix.com for more information about our other sites:
> > > > http://www.techgenix.com
> > > > ------------------------------------------------------
> > > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > >
> > > >
> > > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > >
> > >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> All mail to and from this domain is GFI-scanned.
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
