Welcome to ISAserver.org

Server Publishing RPC and other ports

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> Server Publishing >> Server Publishing RPC and other ports

Page: [1]

Message

<< Older Topic Newer Topic >>

Server Publishing RPC and other ports - 9.May2007 12:52:53 PM

praraujo

Posts: 7
Joined: 22.Nov.2006
Status: offline

Hello,

I'm having some problems with a server publishing rule.

The purpose is to publish the rpc port 135 and some other 3 ports

The published server is on the dmz between the isa server and the external firewall so it's on the external interface of the isa server.

When i publish the ports through a server publishing rule selecting a custom protocol where i have the ports 135 12003 and 381 to 383 incoming it all goes well.

On the logging i get a error message on port 135

0x80074e24 FWX_E_CONNECTION_KILLED

Any ideas ?

Thanks in advance

Post #: 1

Featured Links*

RE: Server Publishing RPC and other ports - 20.May2007 10:50:46 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Why are you trying to publish a server that is external to the firewall? You need to move the RPC server into an ISA firewall DMZ, so that the RPC server is in a firewall protected network.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to praraujo)

Post #: 2

RE: Server Publishing RPC and other ports - 20.May2007 2:20:11 PM

praraujo

Posts: 7
Joined: 22.Nov.2006
Status: offline

Hello,

This server is a relay and is between 2 firewalls the main purpose of this configuration is to assure E-Mails delivery even when the ISA server is down.

I can only publish servers on the internal and dmz networks ?

Thanks in advance

(in reply to tshinder)

Post #: 3

RE: Server Publishing RPC and other ports - 22.May2007 8:21:00 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Yes. The only time you would want to publish an external server is if you want to capture a certain protocol from internal users and make sure that its forwarded to a specific server.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to praraujo)

Post #: 4

RE: Server Publishing RPC and other ports - 22.May2007 3:55:59 PM

praraujo

Posts: 7
Joined: 22.Nov.2006
Status: offline

Hello,

that is just what i want to do. I need a nat from inside to outside to publish a monitoring port on that server ... my problem is that i can't make it work ...

Any ideas ?

Thanks in advance

(in reply to tshinder)

Post #: 5

RE: Server Publishing RPC and other ports - 23.May2007 11:11:52 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Why not use an Access Rule instead?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to praraujo)

Post #: 6

RE: Server Publishing RPC and other ports - 25.May2007 1:39:33 PM

praraujo

Posts: 7
Joined: 22.Nov.2006
Status: offline

This is a monitoring solution, so i need to monitor 2 two machines on separate networks with the same ip address.

I was thinking about doind a nat 1:1 lets say a internal ip address mapped to a external ip.

I don't know if i can do this with Isa Server 2006 ...

Pedro

(in reply to tshinder)

Post #: 7