Welcome to ISAserver.org

Telnet to ISA Server?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> Telnet to ISA Server?

Page: [1]

Message

<< Older Topic Newer Topic >>

Telnet to ISA Server? - 29.Aug.2002 5:14:00 AM

06scootert60

Posts: 1
Joined: 29.Aug.2002
Status: offline

I need to be able to telnet into my Server from home. I started the Telnet Server service and checked the ISA Server for Protocol Def. and saw port 23 configured. I thought that this was it... NOT... I get refused and I need to change this...

Any Ideas?

Post #: 1

Featured Links*

RE: Telnet to ISA Server? - 29.Aug.2002 10:11:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi 06scootert60,

if you want to remotely access the ISA server, I think the best method is to use the buildin Terminal Service in Administrative mode. For more info, check out http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=2;t=004976 .

If that isn't what you need, you can try the following:

1) make sure that the Telnet Server service is only bound to the ISA internal interface. I don't know if that's possible because I've never used it.

2) create a Telnet Server Publishing Rule and use the predefined Telnet Server protocol (TCP port 23 Inbound) as mapped server protocol. You might want to limit access to the rule to a limited set of addresses based on a client address set.

Note: if it is *not* possible to bind the Telnet Server service only to the ISA internal interface, then you have still the option to define a packet filter for the incoming Telnet connections.

HTH,
Stefaan

(in reply to 06scootert60)

Post #: 2

RE: Telnet to ISA Server? - 30.Aug.2002 5:22:00 AM

06scooter60

Posts: 7
Joined: 29.Aug.2002
Status: offline

Thanks for the reply...

I setup a new rule in "Server Publishing Rules" and the options that it gave me were to select the external ip address and the internal ip address. Because I am useing ISA Server and have a mutilhomed Server, I assumed that it wanted both adapters. After inserting the Inernal and External IP Address, I set it to use Telnet Server and finished. I restarted the ISA Services and tried to Telnet in from home [Frown]

no go. I made sure that the Telnet Service was started (Du...) and rechecked my settings. Have I left something out... Also I have a static IP at my home system and assume that I can limit the connection to my address only.

(in reply to 06scootert60)

Post #: 3

RE: Telnet to ISA Server? - 30.Aug.2002 3:17:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi 06scootert60,

the most important configuration is point 1) mentioned in my previous post. Are you really sure that the Telnet Server service is only bound to the ISA internal interface? To check that:
- disable the publishing rule
- make sure the Telnet Server service is started
- do a 'netstat -an' on ISA. There should not be a listener on TCP port 23 on the external IP address.

HTH,
Stefaan

(in reply to 06scootert60)

Post #: 4

RE: Telnet to ISA Server? - 30.Aug.2002 4:25:00 PM

06scooter60

Posts: 7
Joined: 29.Aug.2002
Status: offline

I disabled the "Server Publishing Rule" and ran "netstat -an". I saw no evedence of port 23 on either the internal or external adapter at all. There were only 6 port references to "TCP" and my external adapter. There were dozens of port references to "TCP" on my internal but none for port 23.

[ August 30, 2002, 04:25 PM: Message edited by: 06scooter60 ]

(in reply to 06scootert60)

Post #: 5

RE: Telnet to ISA Server? - 30.Aug.2002 6:17:00 PM

06scooter60

Posts: 7
Joined: 29.Aug.2002
Status: offline

I found that I had set the "IP Packet Filters" remote port to have fixed port of 23 and after changing to any port, it works...

I really appeciate the help that is offered here.

Thanks...

(in reply to 06scootert60)

Post #: 6