Welcome to ISAserver.org

Help with Protocol Definitions and Rules

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Misc.] >> Gaming >> Help with Protocol Definitions and Rules

Page: [1]

Message

<< Older Topic Newer Topic >>

Help with Protocol Definitions and Rules - 27.Dec.2002 1:42:00 AM

ducle

Posts: 24
Joined: 16.Jun.2002
Status: offline

Hi,

I'm getting the strangest behavior I don't
understand. I used to be able to connect to MSN
Zone with the following protocol definitions:
for main zone:
primary connection: 6667 TCP Outbound
secondary: 28800 - 29100 TCP Outbound
for directplay:
primary: 47624 TCP Outbound
secondary: 2300-2400 Send/Receive
2300-2400 TCP Outbound
2300-2400 TCP Inbound

This worked fine for a week. I reformatted my
client hard drive and reinstalled all apps
and the firewall client. Now, I can't connect
to the MSN Zone or the DirectPlay.

I played around and found if I added a protocol:
primary: 28870 TCP Outbound
that I can now connect to the zone lobby...
I don't understand why the secondary connections
didn't apply.

Likewise, I see the 47624 TCP request go out,
via the netstat and the ISA logs. I see a
SYN request from the server for port 2300 TCP
Inbound being blocked in the ISA IP logs.

I don't understand why the DirectPlay protocol
definition wouldn't allow 2300 TCP to come in.

Can anyone help me solve this problem? It
seems none of the secondary connections seem
to work.

Duc Le
ducle@wideopenwest.com

Post #: 1

Featured Links*

RE: Help with Protocol Definitions and Rules - 27.Dec.2002 2:43:00 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Duc,

I'm moving this to the Gaming section as the gaming experts hang out over there.

Thanks!
Tom

(in reply to ducle)

Post #: 2

RE: Help with Protocol Definitions and Rules - 27.Dec.2002 5:02:00 AM

dwhyte

Posts: 11
Joined: 4.Sep.2002
Status: offline

I have had these problems too. It does seem to me that the secondary connections do not work. Can anyone explain secondary connections and ISA Server?
Dave

(in reply to ducle)

Post #: 3

RE: Help with Protocol Definitions and Rules - 27.Dec.2002 3:59:00 PM

spouseele

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Dave,

Basically, secondary connections are only allowed if the primary connection is already established.

One of the best known example I can give you for complex protocols, that means protocols with a primary and one of more secondary connections, is the FTP protocol. Check out my article How the FTP protocol Challenges Firewall Security for full details how the FTP protocol works. Another documented example can be found in my article Using NetMeeting and the H.323 Gatekeeper as a HelpDesk tool.

HTH,
Stefaan

(in reply to ducle)

Post #: 4