Hello,
everything is working fine (http, ftp, via firewall client and proxy), but smtp! Protocol Filters for smtp are open. I have enabled Packet Filters, 110, 25 are permitted. What can io check??
Hello,
i want to allow ftp-access to an outside FTP-Server. I want to allow 21 with the rule:
access-list 100 permit tcp host Client-IP host Server-IP eq 21
(outbound)
Have I to allow 20 as well, or ist the tcp-established-rule sufficient?? Thanks for Info!
Hallo,
puuh, i´m getting confused....
I´d like to mesure the traffic and found the followning OIDs:
1.3.6.1.2.1.2.2.1.10 (localInBits) and
1.3.6.1.2.1.2.2.1.16 (localOutBits)
(this are also the default values used by MRTG)
1) Are these counters accumulative? If not (and it seems so), how often...
Hello,
can anybody be so kind to give me a hint regarding to the followning questions?
1) What is the meaning of the last value of an OID,
for instance, i use "ifInOctets" 1.3.6.1.2.1.2.2.1.10
and i got results for ...1.10.1 and ...1.10.4. I
think .1 and .4 refer to the...
Hello,
my Router has an access-list 110 which permits ports 25, 53, 80, 443.
I woluld like to see ("show access-list") not only the matches of the permitted ports, but also the matches of the denied ports. I also want to see, which denied ports are used and the distribution of...
Hello,
big problem (i might cost my job :-(
We have a huge amount of traffic on the cisco-wan!! I have to tell my chef the reason for it. Of course i ve never was allowed to visit a cisco course. Can anybody tell me, how can i measure which protocolls or services are the reason for the traffic...
Hallo,
im trying to open a flter for DNS. I defined a access-group 101 and bound it to the serial line with "ip group 101 in".
I also defined "access-list 101 permit tcp any any eq www".
Consequently, all traffic besides Port 80 is blocked. Ok.
I defined "access-list...
Hallo,
i want to monitor traffic made by different Destination-IPs. OIDs monitor only complete traffic. Now i checked out "ip-accounting", which gives me a list of pairs (Source-IP:Destination-IP). Not bad, but doesn´t solve my problem. Is it possible to get pairs like "all...
Hallo, i have defined publishing on a sql server (named server_a), which has a trusted connection to server_b. When i try to define a subscription on server_b, i see the server_a, but no published DBs are showed. No error message (even in event viewer). Waht can i test?
If ISA notifies me about Intrusions with the suspicious IP, what should i do? Block the IP (But i can block only special Ports with Packet filter)?? Is it possible to get more Information (i.e. what port, details) about the intrusion?? Can somebody give me some tips?
Greetings J.
Im hosting 3 Webserver with (of course) 3 diffent IPS. The servers are behind a Cisco-Router and connected via Switch to 1 LAN-Card of the router. I want to show customers which traffic was generated by each Webserver-IP through the router seperately. How have i to configure the router so i get...
Hello, big problem: If i use the osql.exe-Tool to connect to a server, its only possible by uing an SQL-Account. But if i use a Windows-Account (SQL runs in mixed mode) i get the "access denied"-message. In order to install Projectserver with Teamservices (complicated) i need a...
Hello,
i used a ports-scanner and it shows me a lot of open ports on one of my servers. Between the scanning workstation and the server is a cisco router. I tried to block one port by configuring an access group (i have experience with that, so it should work) and blocked port 119. Consequently...
Its difficult to find out by books :-(
How do i define Rules (Packet or Protocol) in regard to the results of "netstat -n"?
For instance:
FTP download, netstat -n shows
Local port >1200 foreign 20
Local port >1200 foreign 21
How do i transfer this??
Do i need secondary rules for...
Hello, my ISA-Server has 1 LAN and 1 DSL Connection. From any workstation, SMTP works fine (consequently ISA lets it through). But telnet <mailserver> 25 from the ISA-console does NOT??? Packetfilter and Protocoll-Filter are enabled for any request. What can i do?
Sorry, probably silly question, but sometimes i got a little bit confused... ;-)
Which services have to run on ISA-Server itself? Because packets are only forwarded, can i STOP services like ftp??
Sorry for that question, but thanx for help anyway :-))
Hello, ISA provides reports which you can access directly from ISA Manager. I would like to access these reports from my workstation via Internet Exporer. I can export the report-Format to html, but this is no goot solution. How can i provide the reports for remote access?
What did i wrong? To overcome the problem i defined 3 "all allow" rules (!!!!), a protocol-, a content- and a packet rule! Everything else is working fine now. But from client PCs i can connect to the ftp server, but typing "ls" or "dir" leads to an "invalid...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.