• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA and SOCKS

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Web Proxy] >> Unihomed >> ISA and SOCKS Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA and SOCKS - 22.Aug.2007 10:39:06 AM   
rafael2gc

 

Posts: 3
Joined: 22.Aug.2007
From: Brasil
Status: offline
Hi,
I would like to kwon if ISA 2006 works as a SOCKS gateway ?
If  i active the Socks4 filter, and configure it to listen on localhost/internal networks and them create on rule allowing the internal network to acess the external networks via SOCKS protocol it means that:
1) ISA server will receive the client resquest via SOCKS, conect the destination on behalf of the client and them return to the client, acting as real socks PROXY

2) ISA server will just allow the socks packet pass through to reach a external socks server.

Wich one is right ?

Sds,
Rafael
Post #: 1
RE: ISA and SOCKS - 22.Aug.2007 2:20:45 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Rafael ,

what are you really trying to accomplish? Normally you don't gain any benefit in using ISA as a SOCKS proxy server.

HTH,
Stefaan

(in reply to rafael2gc)
Post #: 2
RE: ISA and SOCKS - 22.Aug.2007 2:42:32 PM   
rafael2gc

 

Posts: 3
Joined: 22.Aug.2007
From: Brasil
Status: offline
Hi Stefaan,
The problem is that i'm doing a migration from Novell Border Manager to ISA 2006 and the Border manager works as a Socks proxy server, them the client want keep this functionality.

ISA works as a Socks proxy server ? Couse i've tried and it doesnt work.
I build one in a lab with ubuntu and SS5 Socks Server and it works just fine.

Sds,
Rafael

(in reply to spouseele)
Post #: 3
RE: ISA and SOCKS - 22.Aug.2007 3:57:09 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Rafael,

I never tried it but I believe ISA can work as a Socks V4 proxy by binding the Socks filter to the ISA internal interface. However, no authentication is possible because only Socks V4 is supported.

BTW --- in the ISA world you should use the Firewall client instead of a Socks client.

HTH,
Stefaan

(in reply to rafael2gc)
Post #: 4
RE: ISA and SOCKS - 23.Aug.2007 9:08:05 AM   
rafael2gc

 

Posts: 3
Joined: 22.Aug.2007
From: Brasil
Status: offline
Hi Stefaan,

There are any docs explain how it works, couse the ISA help is limited to tell how to enable de add-in (what a shame).There's not too much to configure, just enable the add-in and choose in wich interface isa will listem for Socks.
I did it, and them create one rule, allowing internal to external using socks protocol and it doenst work.
There are anything more to configure or what ?

Thanks
Rafaelgc

(in reply to spouseele)
Post #: 5
RE: ISA and SOCKS - 23.Aug.2007 2:23:46 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Rafael,

hmm... that's not the way I think it works!

By enabling the Socks filter on the ISA internal interface, a listener is created on TCP port 1080. You can verify that with the command fwengmon /C. At that point Socks v4 requests will be accepted on the ISA internal interface. So, you don't need to create an allow rule for the Socks protocol/listener itself.

Of course you should create the necessary access rules for the source, destinations and protocols the client will request through the Socks protocol.

HTH,
Stefaan

(in reply to rafael2gc)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Web Proxy] >> Unihomed >> ISA and SOCKS Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts