Welcome to ISAserver.org

Outgoing IP-adress

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> General >> Outgoing IP-adress

Page: [1]

Message

<< Older Topic Newer Topic >>

Outgoing IP-adress - 12.Feb.2004 3:27:00 PM

GulDucat

Posts: 13
Joined: 29.Jan.2004
Status: offline

Hi all,

I have a question regarding the IP-adress, used for outbound communication with the new ISA. By design, the old ISA always used the first IP-adress assigned to the external NIC for outbound traffic. Is it now possible, to define an access policy to use a special IP? For example, outgoing SMTP-traffic on x.x.x.202, HTTP-traffic on x.x.x.203, et cetera...

Does anybody know?

Many thanks in advance,
Tobias Punke

Post #: 1

Featured Links*

RE: Outgoing IP-adress - 12.Feb.2004 10:07:00 PM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

just a thought :

maybe you can make several 'networks' :
10.1.1.1/32 = localhost1
10.1.1.2/32 = localhost2

on your network card put ip address :
10.1.1.1/16 and extra ip 10.1.1.2/16

then make firewall rule : allow smtp from localhost1 to internet
and another rule : allow HTTP from localhost2 to internet

maybe it would fool ISA 2004 [Smile]

Kind regards,
Lex Penrose

(in reply to GulDucat)

Post #: 2

RE: Outgoing IP-adress - 14.Feb.2004 1:35:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Lex,

Here's another idea. I haven't tried it yet, but what the heck.

Create a Network for an IP address on the external interface of the ISA firewall. Then create a second network for the host on the internal network. Then create a route relationship between the two.

That should bind those two addresses. You won't be able to use the public addresses you bound to the server for anything else, but it might work [Smile]

HTH,
Tom

(in reply to GulDucat)

Post #: 3

RE: Outgoing IP-adress - 15.Feb.2004 4:39:00 PM

penrose.l@2college.nl

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline

hm that's a very interesting setup also.
Hm I can already see that ISA 2K4 offers much and much more possibilities than ISA 2000 !
I can't wait for extra filters bringing extra functionalities to this already great product.

Kind regards,
Lex Penrose

(in reply to GulDucat)

Post #: 4

RE: Outgoing IP-adress - 15.Feb.2004 6:33:00 PM