• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Problems with TCP 25 and 110

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> Firewall Client >> Problems with TCP 25 and 110 Page: [1]
Login
Message << Older Topic   Newer Topic >>
Problems with TCP 25 and 110 - 15.Apr.2002 8:25:00 PM   
IonutRosca

 

Posts: 7
Joined: 15.Apr.2002
From: Bucharest
Status: offline
I have a Isa Server installed on a DC.
I can't connect on ports 25 and 110 (TCP).
Can you help me?
Post #: 1
RE: Problems with TCP 25 and 110 - 15.Apr.2002 8:55:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi IonutRosca,

do you mean from ISA itself? If yes, create the necessary packet filters. Protocol rules are for clients/servers behind ISA.

HTH,
Stefaan

(in reply to IonutRosca)
Post #: 2
RE: Problems with TCP 25 and 110 - 15.Apr.2002 9:42:00 PM   
IonutRosca

 

Posts: 7
Joined: 15.Apr.2002
From: Bucharest
Status: offline
I configured following IP packet filters:
Filter type: custom
IP Protocol: TCP
Direction: Both
Local port: Fixed port
Local port number: 25
Remote port: 25
Remote port number: 25
Filter applies to:Default ip addresses (external)
Remote computer:All remote computers
I have the same filter olso for 110.

I have this problem only for ports 25 and 110.
I tested the DNS registration and it is working fine.

(in reply to IonutRosca)
Post #: 3
RE: Problems with TCP 25 and 110 - 15.Apr.2002 9:56:00 PM   
IonutRosca

 

Posts: 7
Joined: 15.Apr.2002
From: Bucharest
Status: offline
I want to connect from my internal network to a external mail server.
I tried with Ms. Outlook Express and telnet on 25 and 110 TCP ports and nothing.
If i try any other port that is open is OK.

(in reply to IonutRosca)
Post #: 4
RE: Problems with TCP 25 and 110 - 15.Apr.2002 9:58:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi IonutRosca,

if you need outbound access, then the packet filter should be:

IP Protocol: TCP
Direction: OUTBOUND
Local port: DYNAMIC
Local port number:
Remote port: FIXED
Remote port number: 25
Filter applies to:Default ip addresses (external)
Remote computer:All remote computers

Services are listening on fixed ports. Clients are making connections on ports >1024 (=dynamic).

HTH,
Stefaan

(in reply to IonutRosca)
Post #: 5
RE: Problems with TCP 25 and 110 - 15.Apr.2002 10:25:00 PM   
IonutRosca

 

Posts: 7
Joined: 15.Apr.2002
From: Bucharest
Status: offline
I modified that filter but it's still not working.
I have an alert with 'Ip packet dropped' but this is all.I can't figure out what filter is doing this.

(in reply to IonutRosca)
Post #: 6
RE: Problems with TCP 25 and 110 - 15.Apr.2002 10:35:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi IonutRosca,

I see now that my previous post crossed nearly yours and I'm a little bit confused on what you want to achieve. [Confused]

Are you trying to connect from ISA itself or from a client behind ISA? That makes a big difference! If it is from ISA itself than you need the packet filters. However if it is from clients behind ISA you need to have the proper protocol rules.

Also, examine the ISA log files. They will help you to better understand your problem. [Wink]

HTH,
Stefaan

(in reply to IonutRosca)
Post #: 7
RE: Problems with TCP 25 and 110 - 15.Apr.2002 10:43:00 PM   
IonutRosca

 

Posts: 7
Joined: 15.Apr.2002
From: Bucharest
Status: offline
I look in log file and a see only allowed operations involving ports 25 and 110.
Here is a sample:
2002-04-15 20:39:30 10.54.243.2 193.226.47.33 Tcp 3905 25 SYN ALLOWED 10.54.243.2 45 00 00 30 3c 48 40 00 80 06 00 00 0a 36 f3 02 c1 e2 2f 21 0f 41 00 19 3d a0 88 0a 00 00 00 00 70 02 40 00 7f de 00 00
2002-04-15 20:39:33 10.54.243.2 193.226.47.33 Tcp 3905 25 SYN ALLOWED 10.54.243.2 45 00 00 30 3c 49 40 00 80 06 00 00 0a 36 f3 02 c1 e2 2f 21 0f 41 00 19 3d a0 88 0a 00 00 00 00 70 02 40 00 7f de 00 00
2002-04-15 20:39:40 10.54.243.2 193.226.47.33 Tcp 3905 25 SYN ALLOWED 10.54.243.2 45 00 00 30 3c 4a 40 00 80 06 00 00 0a 36 f3 02 c1 e2 2f 21 0f 41 00 19 3d a0 88 0a 00 00 00 00 70 02 40 00 7f de 00 00

Also a generate reports, but there are no packet droped.

(in reply to IonutRosca)
Post #: 8
RE: Problems with TCP 25 and 110 - 15.Apr.2002 11:15:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi IonutRosca,

because this is a packet log, I assume you are trying to connect from ISA itself. [Big Grin]

The logs tells you that a TCP connection request is send from 10.54.243.2 port 3905 (source) to 193.226.47.33 port 25 (destination). It seems to me that no reply is comming back. So, the other entries are probably retries.

I've just tried that destination and it worked. What I find a little bit strange is that your ISA external interface has a private non-routable IP-address. Is there another device between the ISA and the ISP who may block those requests?

HTH,
Stefaan

(in reply to IonutRosca)
Post #: 9
RE: Problems with TCP 25 and 110 - 15.Apr.2002 11:17:00 PM   
IonutRosca

 

Posts: 7
Joined: 15.Apr.2002
From: Bucharest
Status: offline
Yes.

(in reply to IonutRosca)
Post #: 10
RE: Problems with TCP 25 and 110 - 15.Apr.2002 11:21:00 PM   
IonutRosca

 

Posts: 7
Joined: 15.Apr.2002
From: Bucharest
Status: offline
Maybe you are right.
I even don't think about it.
Do you know how can i test this?

(in reply to IonutRosca)
Post #: 11
RE: Problems with TCP 25 and 110 - 15.Apr.2002 11:32:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi IonutRosca,

you'll have to talk to the person who gives you that IP-address for the ISA external interface! [Wink]

HTH,
Stefaan

(in reply to IonutRosca)
Post #: 12
RE: Problems with TCP 25 and 110 - 17.Apr.2002 9:55:00 PM   
human

 

Posts: 2
Joined: 17.Apr.2002
Status: offline
I too am having this problem. I am trying to connect to port 110 on a remote server from my ISA server. I have setup a packet filter but no joy. Works fine from clients...

(in reply to IonutRosca)
Post #: 13
RE: Problems with TCP 25 and 110 - 17.Apr.2002 10:03:00 PM   
human

 

Posts: 2
Joined: 17.Apr.2002
Status: offline
Ignore me - I'm an idiot. Sorted it.

(in reply to IonutRosca)
Post #: 14

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> Firewall Client >> Problems with TCP 25 and 110 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts