Welcome to ISAserver.org

Allow outgoing connection for GPS system?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> Allow outgoing connection for GPS system?

Page: [1]

Message

<< Older Topic Newer Topic >>

Allow outgoing connection for GPS system? - 6.Feb.2008 8:21:03 PM

grl570810

Posts: 1
Joined: 6.Feb.2008
From: Sydney Australia
Status: offline

I am a bit of a noob at ISA, but have loads of general networking experience. I am totally stuck as to why I can't get something really simple working...

ISA server 2000 running on Server 2000 SP1.

Internal network IP 192.168.90.0/24
External network IP 10.1.1.0/24 connecting to outside world via an ADSL router at 10.1.1.1

The client app needs to outward connect to a server. It uses port 2009 TCP. I have set up the following rule in packet filtering:

Allow outbound TCP 2009 to all external addresses. I have tried all sorts of variants on this - allowing both directions and specifying the IP address of the external server both explicitly and as a subnet. No joy - the client will not connect. If I move the client to run directly on the 10.1.1.0 subnet and bypasss the ISA box it works fine.

Can someone please advise what obviously stupid thing I'm doing here that stops it from working????

TIA,
Graham

Post #: 1

Featured Links*

RE: Allow outgoing connection for GPS system? - 15.Feb.2008 1:52:51 AM

AHIT

Posts: 1561
Joined: 22.Jul.2002
From: Sydney, Australia
Status: offline

Without being intimately aquanited with teh specific application (and trying it in a dev/test environment) I'm merely guessing, but.......

sure there's not a 2009 UDP as well?
How do you know it's 2009 TCP? Sure there's not other secondary connections?
Possibly unusual "unexpected" traffic returns from a different port than the session is expecting to hear from, so it's denied.
Try putting a packet sniffer on the traffic when machine in the 10.1.1.0 network to see EXACTLY what ports/destinations ARE used?

LOTS of possiblities here.

Best O' luck with it

_____________________________

http://www.ahit.com.au/isa
(Previous nick: Tolk)

(in reply to grl570810)

Post #: 2