Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Firewall Client on ISA Server

0 views
Skip to first unread message

Ian

unread,
Jul 4, 2001, 8:23:43 AM7/4/01
to
Sorry if this is the wrong NG for ISA Server, couldn't find any other.

Is it safe to load the Firewall Client software onto the same machine as the
ISA Server?

I'm trying to get the "Windows Time" service to work on SBS 2000, and I
think ISA server is stopping it from connecting. I thought I'd added the
appropriate permissions/filters but it still doesn't connect.

Ian.


S. Pidgorny [MVP]

unread,
Jul 5, 2001, 3:24:06 AM7/5/01
to
That is not safe and shopuldn't be done. What appropriate filters have you
added?

--
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-

"Ian" <ix...@btconnect.com.spamfilter> wrote in message
news:EKD07.3298$697.86655@NewsReader...

Ian

unread,
Jul 5, 2001, 8:51:37 AM7/5/01
to
I've added a protocol filter to allow NTP traffic from the local server's IP
Address. I'm assuming this isn't being checked, as the server doesn't have
the client software on it.

Ian.

"S. Pidgorny [MVP]" <slav...@yahoo.com> wrote in message
news:O3uGRSSBBHA.1816@tkmsftngp07...

S. Pidgorny [MVP]

unread,
Jul 6, 2001, 12:39:37 AM7/6/01
to
That shoul work. ouble check: for NTP traffic, local port - dynamic, remote
port - 119/TCP.

--
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-

"Ian" <ix...@btconnect.com.spamfilter> wrote in message

news:NeZ07.296$PE5.9339@NewsReader...

Ian

unread,
Jul 6, 2001, 10:48:37 AM7/6/01
to
I have know got it working by adding a custom packet filter. I'm assuming
that the default protocol rule for NTP is to allow clients to access a
server and not the other way round or that it doesn't work without the
firewall client.

NTP is 123/UDP, 119/TCP is NNTP.

Thanks,
Ian.


"S. Pidgorny [MVP]" <slav...@yahoo.com> wrote in message

news:uwNuNadBBHA.1916@tkmsftngp07...

0 new messages