Welcome to ISAserver.org

Skype Fails when i block messenger

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Skype Fails when i block messenger

Page: [1]

Message

<< Older Topic Newer Topic >>

Skype Fails when i block messenger - 28.Jun.2006 1:57:50 PM

nshahid

Posts: 7
Joined: 27.Jun.2006
Status: offline

i successfully blocked the msn messenger but it also blocked the skype messenger, which i dont want to block.

< Message edited by nshahid -- 4.Jul.2006 1:03:56 PM >

Post #: 1

Featured Links*

RE: Skype Fails when i block messenger - 5.Jul.2006 5:22:26 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi N,

How did blocking the msn user-agent block Skype?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to nshahid)

Post #: 2

RE: Skype Fails when i block messenger - 5.Jul.2006 7:27:58 PM

nshahid

Posts: 7
Joined: 27.Jun.2006
Status: offline

Sir: its my pleasure that you replied me, such a great thing for me. Well i used number of methods to block msn messenger.

i created two groups (limited internet group & full web access) in active directory and used them in isa 2004 then created two access policy. one deny msn policy with users mentioned & exception also mentioned. Then i i created rule for full web access users without any restriction. it is ok for me if limited internet group's skype fail to connect but for managers i cant afford.
i used signature for limited internet users by configuring http and request header>user agent. but surprisingly it aslo blocked skype of exception group (full web access).
then i tried to block msn by create computer sets, but it also failed.
i tried with url set, i dont know it failed.
i think ordering may be a issue which i dont know whether the deny rule must be on top or below.

it will be great deal of pleasure if u help me in this issue.

(in reply to tshinder)

Post #: 3

RE: Skype Fails when i block messenger - 6.Jul.2006 4:39:10 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi N,

I think there's something missing here. I'd have to see the rules to determine what happened.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to nshahid)

Post #: 4

RE: Skype Fails when i block messenger - 10.Jul.2006 4:59:43 PM

nshahid

Posts: 7
Joined: 27.Jun.2006
Status: offline

Hi,

Sir: following are the rules with their ordering.

OWA outlook for external users-----------
ftp rule for Accessing FTP from external-------
mail server imap
mail server exchange rpc
mail server smtp
server to server smtp server
internal to VPN Network
VPN access to internal
Deny MSN allowing all authenticated users with Exception of users to allow, using http filtering and blocking MSN request header.
Full access rule for internal to external with user group full web access.

Thanks for your coordination

(in reply to tshinder)

Post #: 5

RE: Skype Fails when i block messenger - 10.Jul.2006 5:59:26 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi N,

In the ISA firewall's logs, does it show that the MSN Deny rule is the one blocking the Skype messages?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to nshahid)

Post #: 6

RE: Skype Fails when i block messenger - 12.Jul.2006 8:44:07 PM

nshahid

Posts: 7
Joined: 27.Jun.2006
Status: offline

Hi Sir:

Well i checked the logs, it allows connection but with http status code 407 (client must first authenticate itself with the proxy) which means skype cannot authenticate properly. However a user is already logged onto domain(authenticated) , this is not understandable.

i tried in options of skype by enabling authentication method & tried user@domain, also domain\user and user@domain.com with passwords. but to no avail.

hmmm...

ani idea

(in reply to tshinder)

Post #: 7

RE: Skype Fails when i block messenger - 13.Jul.2006 3:04:46 AM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi N,

Install the firewall client and allow all protocols and sites outbound.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to nshahid)

Post #: 8

RE: Skype Fails when i block messenger - 26.Jul.2006 2:48:10 PM

nshahid

Posts: 7
Joined: 27.Jun.2006
Status: offline

Hi Tshinder:

Sir: thanks for your help, it worked and i must thanks for your pinpointing my problem.

Sir but suddenly my outgoint emails are not going through exchange server. I logged my ISA Machine and found that current Rule with Full Web access is denying the smtp protocol to google mail servers. i logged again and again i found that it is blocking other smtp traffic.

Now my question is, should i need to install proxy client on mail server. or this is not the concerned problem. I know you can suggest the best.

Thanks & Regards.

(in reply to tshinder)

Post #: 9

RE: Skype Fails when i block messenger - 26.Jul.2006 3:38:12 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

What is "proxy client"?

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to nshahid)

Post #: 10

RE: Skype Fails when i block messenger - 26.Jul.2006 3:50:03 PM

manguonden

Posts: 59
Joined: 10.May2004
From: Viet Nam
Status: offline

You can use monitor logging from ISA SERVER and use client access to Skype. After you can see port logging and block for skype.

(in reply to tshinder)

Post #: 11

RE: Skype Fails when i block messenger - 27.Jul.2006 3:50:30 PM

nshahid

Posts: 7
Joined: 27.Jun.2006
Status: offline

Hi Tshinder:

I am Sorry, actually i wanted to write Firewall client, however i wrote proxy client: ?

Regards

Naveed Shahid

< Message edited by nshahid -- 27.Jul.2006 4:10:48 PM >

(in reply to manguonden)

Post #: 12

RE: Skype Fails when i block messenger - 27.Jul.2006 5:42:52 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Naveed,

OK, got it. I never understand why people say "proxy client" since there isn't and never was a "proxy client".

You should never install the Firewall client on a server machine. The firewall client should be installed only on client machines.

Do you have an Access Rule that allows outbound SMTP to the Exchange Server?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to nshahid)

Post #: 13

RE: Skype Fails when i block messenger - 28.Jul.2006 7:41:39 PM

nshahid

Posts: 7
Joined: 27.Jun.2006
Status: offline

Thanks Tom for such a good consideration, i wish that i live in your home town and can learn more & more from you, however u always shows perfect response. Thats Wonderful i am surprised, many of my friends denied to sort my problems.

Well Sir: the following is the configuration detail:

i have been handed over the network with this configuration 6 weeks ago, i have a multihomed isa machine [edge template used] for mail, vpn clients & internet access to local lan. This isa machine is joined in domain. Mail server is on dc with exchange 2003 installed. External mails clients are intended to use this server through outlook which never successfully worked. now when i blocked messengers internal lan clients have problem sending emails. we are receiving emails quite correctly. the rules for publishing exchange server are:

1. IMAP Server from / listner is external, internal to destination mail server (internal)
2. POP3 Server from / listner is external, internal to destination mail server (internal)
3. Exchange RPC from / listner is external, internal to destination mail server (internal)
4. SMTP Server from / listner is external, internal to destination mail server (internal)
5. SMTP Server 2 Server Communication from / listner is external, internal to destination mail server (internal)
6. DNS Outbound
7. VPN to Internal Access Rule
8. Deny Messengers
9. Full Web Access Rule

I know that i am new to ISA, there is some configuration problem with configuration. But unable to locate.

Regards,

Naveed

(in reply to tshinder)

Post #: 14

RE: Skype Fails when i block messenger - 29.Jul.2006 6:03:28 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Naveed,

It looks like you have two SMTP server publishing rules, is that right?

I don't see any rules that are allowing SMTP outbound.

Thanks!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to nshahid)

Post #: 15