Welcome to ISAserver.org

Access Policy 2 Error -Forced to Reinstall

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Access Policies >> Access Policy 2 Error -Forced to Reinstall

Page: [1]

Message

<< Older Topic Newer Topic >>

Access Policy 2 Error -Forced to Reinstall - 11.Jun.2008 5:05:58 AM

Budmaas

Posts: 48
Joined: 7.Oct.2007
Status: offline

Hi all

Can anybody find the error in the following Access Policy 2 ?

Policy name - Email only & locked IP's [ doesn't matter ]
Rule Action - Allow
Protocol - Selected Protocol [ pop3 & SMTP ] only
or
Rule Action - Deny
Protocol - http
[Tested Both way ]

Access rule - All network & local host
Acces rule destination - All network & local host.
All users

Please find the error in this access policy.
While using Isa 2004 & 2006 & creating policy 2 , Internet & email stops & only way is to get back is uninstall & install it again.

Please check the policy, if i'm making any mistake.

< Message edited by Budmaas -- 19.Jun.2008 4:44:08 AM >

Post #: 1

Featured Links*

RE: Access Policy 2 Error -Reinstalling is the solution - 11.Jun.2008 4:25:48 PM

paulo.oliveira

Posts: 609
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline

Hi,

If you are trying to allow internet access and pop3/smtp access to the users on your internal network, the rules should be the following:

Rule#: 1
Rule name: Allow Internet Access; [ doesn't matter ]
Action: Allow;
Protocol: HTTP;
Source: Internal;
Destination: External;
User: All users (or user set defined by you)

Rule#: 2
Rule name: Allow Access To POP3/SMTP ; [ doesn't matter ]
Action: Allow;
Protocol: POP3, SMTP;
Source: Internal;
Destination: External;
User: All users (or user set defined by you)

Regards,
Paulo Oliveira.

(in reply to Budmaas)

Post #: 2

RE: Access Policy 2 Error -Reinstalling is the solution - 17.Jun.2008 11:38:24 AM

Budmaas

Posts: 48
Joined: 7.Oct.2007
Status: offline

quote:

ORIGINAL: paulo.oliveira

Hi,

If you are trying to allow internet access and pop3/smtp access to the users on your internal network, the rules should be the following:

Rule#: 1
Rule name: Allow Internet Access; [ doesn't matter ]
Action: Allow;
Protocol: HTTP;
Source: Internal;
Destination: External;
User: All users (or user set defined by you)

Rule#: 2
Rule name: Allow Access To POP3/SMTP ; [ doesn't matter ]
Action: Allow;
Protocol: POP3, SMTP;
Source: Internal;
Destination: External;
User: All users (or user set defined by you)

Regards,
Paulo Oliveira.

It looks like seperate policies.
my current policy is like this

Action - Allow
Protocol - All outbound
from - all network ( local host )
to - all network ( local host)
Condition - all users.
The above policy is against default rule of isa 2006 auto created while installation.

My requirement is

2 policies - one for internet & other for email only

Internet users IP => 192.168.1.1 - 7 && 192.168.1.200 to 230

Email Users are => 192.168.1.8 - 200 && 192.168.1.231 to 254

Is it possible this way ?

(in reply to paulo.oliveira)

Post #: 3

RE: Access Policy 2 Error -Reinstalling is the solution - 18.Jun.2008 6:28:55 AM

Budmaas

Posts: 48
Joined: 7.Oct.2007
Status: offline

In addition to the above what eror i have seen is

http://ieframe.dll//dnserror.htm

This error used to come when I create access rule 2 to deny http access for certain range of IP's on network.

Once this error starts ISA 2004 & 2006 stops everything & never let internet access start until I re-install ISA 2004/2006 again.

Looks like amazing error or may be i /m doing something wrong everytime.

???

(in reply to Budmaas)

Post #: 4

RE: Access Policy 2 Error -Reinstalling is the solution - 19.Jun.2008 2:17:46 PM

bhavin78

Posts: 428
Joined: 18.Jul.2005
From: USA
Status: offline

Did you check logs?

(in reply to Budmaas)

Post #: 5

RE: Access Policy 2 Error -Reinstalling is the solution - 21.Jun.2008 5:04:12 AM

Budmaas

Posts: 48
Joined: 7.Oct.2007
Status: offline

quote:

ORIGINAL: bhavin78

Did you check logs?

Alert Information
Description: ISA Server detected routes through the network adapter SAT Connection that do not correlate with the network to which this network adapter belongs. When networks are configured correctly, the IP address ranges included in each array-level network must include all IP addresses that are routable through its network adapters according to their routing tables. Otherwise valid packets may be dropped as spoofed. The following ranges are included in the network's IP address ranges but are not routable through any of the network's adapters: 192.168.0.0-192.168.0.0;192.168.1.255-192.168.255.255;.
Note that this event may be generated once after you add a route, create a remote site network, or configure Network Load Balancing and may be safely ignored if it does not re-occur.

my strange problem is - i cannot create 2-3 access policies, whenever i tried to create one more - Access for users go off & it cannot be restroed until I uninstall & install ISA 2004/2006.

< Message edited by Budmaas -- 21.Jun.2008 5:09:18 AM >

(in reply to bhavin78)

Post #: 6

RE: Access Policy 2 Error -Reinstalling is the solution - 23.Jun.2008 8:33:46 AM

Budmaas

Posts: 48
Joined: 7.Oct.2007
Status: offline

Updating the issue
It may be reason of those errors above

I have 2 NICs in this server & SAT NIC is on DHCP enabled.
Do i need to make a policy for this NIC also with specifiying the range of IPs' ?

Just checking?

(in reply to Budmaas)

Post #: 7