Re: Webproxy clients can browse webs no matter the port?

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Thomas W Shinder [MVP] (tshinder_at_hotmail.com)
Date: 08/11/04 

Date: Wed, 11 Aug 2004 17:06:24 -0500

Hi Ivan,

You gave the clients access to HTTP right? So they now are using HTTP, ports
are meaningless, protocols are what firewall's control

HTH, 

--
Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
"Ivan Mckenzie" <imck@inerza.com> wrote in message
news:#6J0Xl9fEHA.596@TK2MSFTNGP11.phx.gbl...
: Hi everyone. I have a rule on my ISA2004 the permits http from the
internal
: to the external network. Clients on the internal network witch do not
: configure there web browser(IE6) to use a proxy con only browse webs on
the
: external network witch run on port 80. Up to here OK.
:
: But why can webproxy clients browse webs on the external network witch run
: on any port. For example 8081. To me it seems a security issue.
:
: Could someone please explain it.
:
: Thanks a lot,
:
: Ivan Mckenzie
:
:

Relevant Pages

  • Re: SBS 2003 and Outlook RPC over HTTP issues
    ... , but some of my clients do not want users to ... definitely closed now cause when I open it up http: ... the article is incorrect in stating that port 80 is needed. ... that port 443 and port 80 must be open to use RPC over HTTP. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 and Outlook RPC over HTTP issues
    ... Just to be clear, you should have port 80 closed, and tell your users to ... remote.domain.com, but some of my clients do ... definitely closed now cause when I open it up http: ... that port 443 and port 80 must be open to use RPC over HTTP. ...
    (microsoft.public.windows.server.sbs)
  • Re: Webproxy clients can browse webs no matter the port?
    ... what I see is that HTTP is defined in ISA2004 as TCP port 80 outbound. ... clients only webs that are on port 80. ...
    (microsoft.public.isaserver)
  • ISA 2004 Webverkettung
    ... doch bitte die anfragen der Clients auf einen Squid Proxy ... mit Port 3128 für http und https umleiten soll der über ... Client eine seite auf zu machen bekommte er einen Http ...
    (microsoft.public.de.german.isaserver)
  • Re: adding machine to domain with NATed IPs
    ... sounds that the DCs are not reaching the clients ... weight 100, port 389, target srv5.mydomain.local ...
    (microsoft.public.windows.server.active_directory)