Welcome to ISAserver.org

Yahoo messenger.

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> Yahoo messenger.

Page: [1]

Message

<< Older Topic Newer Topic >>

Yahoo messenger. - 4.Jun.2002 5:42:00 PM

deepiceman

Posts: 61
Joined: 12.Apr.2002
From: Farmington Hills, MI
Status: offline

I am trying to give access to yahoo messenger to some people in the office while keeping the rest of them out of it. I am doing this by creating protocol rules.
I have a default rule that allows all the protocols to go through. Then I created a protocol rule to deny messenger usage based on the IP address. This worked and I got what I was looking for. But there is a slight problem

Everytime anyone who has the ability to launch yahoo and does so, keeps getting prompted to logon to the firewall/proxy server.

I looked at the web proxy log on the server and this is what I have....

192.168.xxx.140 anonymous Mozilla Compatible/2.0(WinNT; I; NCC/2.0) 2002-06-04 15:04:26 w2kisa1 - update.pager.yahoo.com - 80 - 284 402 http HEAD http://update.pager.yahoo.com/sclients.html - 407
192.168.xxx.140 anonymous Mozilla Compatible/2.0 (WinNT; I; NCC/2.0) 2002-06-04 15:04:26 w2kisa1 - update.pager.yahoo.com - 80 - 376 495 http HEAD http://update.pager.yahoo.com/sclients.html - 407
192.168.xxx.140 anonymous Mozilla Compatible/2.0 (WinNT; I; NCC/2.0) 2002-06-04 15:04:26 w2kisa1 - update.pager.yahoo.com - 80 - 524 402 http HEAD http://update.pager.yahoo.com/sclients.html - 407
192.168.xxx.140 anonymous Mozilla/4.01 [en] (Win95; I) 2002-06-04 15:04:27 w2kisa1 - pgq.yahoo.com - 80 - 283 4172 http GET http://pgq.yahoo.com/feed/pg4/ - 407
192.168.xxx.140 anonymous Mozilla/4.01 [en] (Win95; I) 2002-06-04 15:04:27 w2kisa1 - pgq.yahoo.com - 80 - 375 495 http GET http://pgq.yahoo.com/feed/pg4/ - 407
192.168.xxx.140 anonymous Mozilla/4.01 [en] (Win95; I) 2002-06-04 15:04:27 w2kisa1 - pgq.yahoo.com - 80 - 523 4172 http GET http://pgq.yahoo.com/feed/pg4/ - 407

Another thing I need to point out is that yahoo messenger doesnt really use the ISA server to connect. There are a few reasons... I wont take http proxy with a username, I am not willing to use the socks proxy. So is there anything else that I can do to not have that stupid logon box from not appearing next time????

Any help would be appreciated ..
Thanks in advance.

Post #: 1

Featured Links*

RE: Yahoo messenger. - 4.Jun.2002 11:27:00 PM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi iceman,

Make sure you install the firewall clients on all the hosts.

Configure the HTTP Redirector to forward requests directly to the Internet server.

Let us know if this helps.

Also, it appears that they're being denied to the page.yahoo site. Is there a reason for this?

Thanks!

Tom

(in reply to deepiceman)

Post #: 2

RE: Yahoo messenger. - 5.Jun.2002 6:25:00 PM

deepiceman

Posts: 61
Joined: 12.Apr.2002
From: Farmington Hills, MI
Status: offline

Tom,
As per your suggestions I have checked to see how things are configured. Every host has the firewall client installed and the HTTP redirector is configured to go directly to the server.

However I believe the problem lies in my DNS somewhere because 95% of my clients are unable to detect the ISA server (the icon on the taskbar says so). I would really appreciate it if someone can tell me how can I fix this.
For the hosts where it actually shows up it has the "automatic discovery" option disabled.

Thanks again.

(in reply to deepiceman)

Post #: 3

RE: Yahoo messenger. - 5.Jun.2002 7:29:00 PM

deepiceman

Posts: 61
Joined: 12.Apr.2002
From: Farmington Hills, MI
Status: offline

Woo hooooooo,
I finally got it fixed. Well I am not sure how this whole thing is working but here is what I did.
Just like Tom said every host has to have the firewall client installed. Make sure that "Automatically detect ISA server" is unchecked.
As per Tom have the HTTP redirector to go directly to the server.
In Yahoo choose "No network detection" in the Connections tab.

About the firewall client icon on the taskbar, here is what I found. As long as there is some applcation using that connection it will come up with the connect icon, otherwise it will come up with "configured to use the ISA server".

That did it for me .. I dont have any more logon prompts to deal with ... [Big Grin]