• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Skype Fails when i block messenger

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Skype Fails when i block messenger Page: [1]
Login
Message << Older Topic   Newer Topic >>
Skype Fails when i block messenger - 28.Jun.2006 1:57:50 PM   
nshahid

 

Posts: 7
Joined: 27.Jun.2006
Status: offline
i successfully blocked the msn messenger but it also blocked the skype messenger, which i dont want to block.



< Message edited by nshahid -- 4.Jul.2006 1:03:56 PM >
Post #: 1
RE: Skype Fails when i block messenger - 5.Jul.2006 5:22:26 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi N,

How did blocking the msn user-agent block Skype?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nshahid)
Post #: 2
RE: Skype Fails when i block messenger - 5.Jul.2006 7:27:58 PM   
nshahid

 

Posts: 7
Joined: 27.Jun.2006
Status: offline
Sir: its my pleasure that you replied me, such a great thing for me. Well i used number of methods to block msn messenger.
  • i created two groups (limited internet group & full web access) in active directory and used them in isa 2004 then created two access policy. one deny msn policy with users mentioned & exception also mentioned. Then i i created rule for full web access users without any restriction. it is ok for me if limited internet group's skype fail to connect but for managers i cant afford.
  • i used signature for limited internet users by configuring http and request header>user agent. but surprisingly it aslo blocked skype of exception group (full web access).
  • then i tried to block msn by create computer sets, but it also failed.
  • i tried with url set, i dont know it failed.
  • i think ordering may be a issue which i dont know whether the deny rule must be on top or below.


it will be great deal of pleasure if u help me in this issue.

(in reply to tshinder)
Post #: 3
RE: Skype Fails when i block messenger - 6.Jul.2006 4:39:10 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi N,

I think there's something missing here. I'd have to see the rules to determine what happened.

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nshahid)
Post #: 4
RE: Skype Fails when i block messenger - 10.Jul.2006 4:59:43 PM   
nshahid

 

Posts: 7
Joined: 27.Jun.2006
Status: offline
Hi,

Sir: following are the rules with their ordering.

  • OWA outlook for external users-----------
  • ftp rule for Accessing FTP from external-------
  • mail server imap
  • mail server exchange rpc
  • mail server smtp
  • server to server smtp server
  • internal to VPN Network
  • VPN access to internal
  • Deny MSN allowing all authenticated users with Exception of users to allow, using http filtering and blocking MSN request header.
  • Full access rule for internal to external with user group full web access.


Thanks for your coordination

(in reply to tshinder)
Post #: 5
RE: Skype Fails when i block messenger - 10.Jul.2006 5:59:26 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi N,

In the ISA firewall's logs, does it show that the MSN Deny rule is the one blocking the Skype messages?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nshahid)
Post #: 6
RE: Skype Fails when i block messenger - 12.Jul.2006 8:44:07 PM   
nshahid

 

Posts: 7
Joined: 27.Jun.2006
Status: offline
Hi Sir:

Well i checked the logs, it allows connection but with http status code 407 (client must first authenticate itself with the proxy) which means skype cannot authenticate properly. However a user is already logged onto domain(authenticated) , this is not understandable.

i tried in options of skype by enabling authentication method & tried user@domain, also domain\user and user@domain.com with passwords. but to no avail.

hmmm...

ani idea

(in reply to tshinder)
Post #: 7
RE: Skype Fails when i block messenger - 13.Jul.2006 3:04:46 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi N,

Install the firewall client and allow all protocols and sites outbound.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nshahid)
Post #: 8
RE: Skype Fails when i block messenger - 26.Jul.2006 2:48:10 PM   
nshahid

 

Posts: 7
Joined: 27.Jun.2006
Status: offline
Hi Tshinder:

Sir: thanks for your help, it worked and i must thanks for your pinpointing my problem.

Sir but suddenly my outgoint emails are not going through exchange server. I logged my ISA Machine and found that current Rule with Full Web access is denying the smtp protocol to google mail servers. i logged again and again i found that it is blocking other smtp traffic.

Now my question is, should i need to install proxy client on mail server. or this is not the concerned problem. I know you can suggest the best.

Thanks & Regards.

(in reply to tshinder)
Post #: 9
RE: Skype Fails when i block messenger - 26.Jul.2006 3:38:12 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
What is "proxy client"?

_____________________________

Thomas W Shinder, M.D.

(in reply to nshahid)
Post #: 10
RE: Skype Fails when i block messenger - 26.Jul.2006 3:50:03 PM   
manguonden

 

Posts: 59
Joined: 10.May2004
From: Viet Nam
Status: offline
You can use monitor logging from ISA SERVER and use client access to Skype. After you can see port logging and block for skype.

(in reply to tshinder)
Post #: 11
RE: Skype Fails when i block messenger - 27.Jul.2006 3:50:30 PM   
nshahid

 

Posts: 7
Joined: 27.Jun.2006
Status: offline
Hi Tshinder:

I am Sorry, actually i wanted to write Firewall client, however i wrote proxy client: ?

Regards

Naveed Shahid

< Message edited by nshahid -- 27.Jul.2006 4:10:48 PM >

(in reply to manguonden)
Post #: 12
RE: Skype Fails when i block messenger - 27.Jul.2006 5:42:52 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Naveed,

OK, got it. I never understand why people say "proxy client" since there isn't and never was a "proxy client".

You should never install the Firewall client on a server machine. The firewall client should be installed only on client machines.

Do you have an Access Rule that allows outbound SMTP to the Exchange Server?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nshahid)
Post #: 13
RE: Skype Fails when i block messenger - 28.Jul.2006 7:41:39 PM   
nshahid

 

Posts: 7
Joined: 27.Jun.2006
Status: offline
Thanks Tom for such a good consideration, i wish that i live in your home town and can learn more & more from you, however u always shows perfect response. Thats Wonderful i am surprised, many of my friends denied to sort my problems.

Well Sir: the following is the configuration detail:

i have been handed over the network with this configuration 6 weeks ago, i have a multihomed isa machine [edge template used] for mail, vpn clients & internet access to local lan. This isa machine is joined in domain. Mail server is on dc with exchange 2003 installed. External mails clients are intended to use this server through outlook which never successfully worked. now when i blocked messengers internal lan clients have problem sending emails. we are receiving emails quite correctly. the rules for publishing exchange server are:

1. IMAP Server from / listner is external, internal to destination mail server (internal)
2. POP3 Server from / listner is external, internal to destination mail server (internal)
3. Exchange RPC from / listner is external, internal to destination mail server (internal)
4. SMTP Server from / listner is external, internal to destination mail server (internal)
5. SMTP Server 2 Server Communication from / listner is external, internal to destination mail server (internal)
6. DNS Outbound
7. VPN to Internal Access Rule
8. Deny Messengers
9. Full Web Access Rule

I know that i am new to ISA, there is some configuration problem with configuration. But unable to locate.

Regards,

Naveed

(in reply to tshinder)
Post #: 14
RE: Skype Fails when i block messenger - 29.Jul.2006 6:03:28 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Naveed,

It looks like you have two SMTP server publishing rules, is that right?

I don't see any rules that are allowing SMTP outbound.

Thanks!

Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to nshahid)
Post #: 15

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Skype Fails when i block messenger Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts