Re: Access rule for Hotmail & Yahoo mail in ISA 2000 server



On Jul 4, 2:22 pm, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
wrote:
Hello Syed,

Thank you for kind update.

I had apply a yahoo.com mailbox, and enter the mailbox, view the web page
source HTML code. I find that all the pictures on the page come from a
domain called *. yimg.com. However, this domain is not allow by your ISA
2000 rule, so you get many red X. Therefore, please add the domain *.
yimg.com to the Bussi Office Destination Sets, and test this issue.

Additional, we do not recommend you install ISA 2000 on a single NIC server
to block client computers access some part of Internet. The client can
bypass the ISA 2000 if the client disable web proxy and pointing default
gateway to router. Except you can set block rule on your router.

Personal, I suggest you upgrade your SBS 2003 standard edition to premium
edition which will include ISA 2004.

Hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! -www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
checkhttp://support.microsoft.comfor regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: sa_aziz9...@xxxxxxxxx
| Newsgroups: microsoft.public.windows.server.sbs
| Subject: Re: Access rule for Hotmail & Yahoo mail in ISA 2000 server
| Date: Wed, 04 Jul 2007 01:45:31 -0700
| Organization:http://groups.google.com
| Lines: 307
| Message-ID: <1183538731.257060.51...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <1183285834.575529.79...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <1183372495.616741.152...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| <pmGa3hVvHHA.3...@xxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 212.76.64.10
| Mime-Version: 1.0
| Content-Type: text/plain; charset="us-ascii"
| Content-Transfer-Encoding: quoted-printable
| X-Trace: posting.google.com 1183538731 10039 127.0.0.1 (4 Jul 2007
08:45:31 GMT)
| X-Complaints-To: groups-ab...@xxxxxxxxxx
| NNTP-Posting-Date: Wed, 4 Jul 2007 08:45:31 +0000 (UTC)
| In-Reply-To: <pmGa3hVvHHA.3...@xxxxxxxxxxxxxxxxxxxxxx>
| User-Agent: G2/1.0
| X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET
CLR 1.1.4322),gzip(gfe),gzip(gfe)
| X-HTTP-Via: 1.1 KHISA
| Complaints-To: groups-ab...@xxxxxxxxxx
| Injection-Info: o61g2000hsh.googlegroups.com; posting-host=212.76.64.10;
| posting-account=dmGs_Q0AAABks6mcUV-HybxrEiOsEopl
| Path:
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS01.phx.gbl!msrtrans­!
msrn-in!newshub.sdsu.edu!postnews.google.com!o61g2000hsh.googlegroups.com!n­o
t-for-mail
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:48108
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| On Jul 3, 12:56 pm, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])| wrote:

| > Hello Syed,
| >
| > Thank you for kind update.
| >
| > 1. From the client error screenshot, we can see, the clients want to
access
| > the web
sites:http://us.f362.mail.yahoo.comhttps://accountservices.passport.net
| > However, the web sites do not in your Destination Sets. Therefore, I
| > suggest we add the following web sites in the Bussi Office Destination
Sets:
| > *.mail.yahoo.com
| > *.mail.live.com
| > accountservices.passport.net
| >
| > Then, restart the Firewall service and test this issue.
| >
| > 2. Even, you can try to add *.yahoo.com and *.live.com to the Bussi
Office
| > Destination Sets to test this issue.
| >
| > 3. From the MPS report, I get that you have single NIC on your SBS. Do
you
| > install your ISA server 2000 on this SBS?
| >
| > If yes, this is a SBS standard edition, and it not including ISA
component.
| > Do you buy a standard ISA server 2000 copy and install it on your SBS?
| >
| > If no, where do you install the ISA server 2000? Please let me know the
| > topology of your network.
| >
| > Additional, you can download the ISAinfo.vbe
fromhttp://www.isatools.org/tools/isainfovbe.zip
| >
| > Hope these steps will give you some help.
| >
| > Thanks and have a nice day!
| >
| > Best regards,
| >
| > Terence Liu(MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! -www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup
here:http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > checkhttp://support.microsoft.comforregional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| > --------------------
| > | From: sa_aziz9...@xxxxxxxxx
| > | Newsgroups: microsoft.public.windows.server.sbs
| > | Subject: Re: Access rule for Hotmail & Yahoo mail in ISA 2000 server
| > | Date: Mon, 02 Jul 2007 03:34:55 -0700
| > | Organization:http://groups.google.com
| > | Lines: 220
| > | Message-ID: <1183372495.616741.152...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| > | References: <1183285834.575529.79...@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| > | <Fzy2Z#FvHHA....@xxxxxxxxxxxxxxxxxxxxxx>
| > | NNTP-Posting-Host: 87.101.240.8
| > | Mime-Version: 1.0
| > | Content-Type: text/plain; charset="us-ascii"
| > | Content-Transfer-Encoding: quoted-printable
| > | X-Trace: posting.google.com 1183372495 27398 127.0.0.1 (2 Jul 2007
| > 10:34:55 GMT)
| > | X-Complaints-To: groups-ab...@xxxxxxxxxx
| > | NNTP-Posting-Date: Mon, 2 Jul 2007 10:34:55 +0000 (UTC)
| > | In-Reply-To: <Fzy2Z#FvHHA....@xxxxxxxxxxxxxxxxxxxxxx>
| > | User-Agent: G2/1.0
| > | X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1;
.NET
| > CLR 1.1.4322),gzip(gfe),gzip(gfe)
| > | X-HTTP-Via: 1.1 KHISA
| > | Complaints-To: groups-ab...@xxxxxxxxxx
| > | Injection-Info: m36g2000hse.googlegroups.com;
posting-host=87.101.240.8;
| > | posting-account=dmGs_Q0AAABks6mcUV-HybxrEiOsEopl
| > | Bytes: 9282
| > | X-Original-Bytes: 9239
| > | Path:
| >
TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTFEEDS01.phx.gbl!newsfeed­­
0
| >
0.sul.t-online.de!t-online.de!border2.nntp.dca.giganews.com!border1.nntp.dc­­
a
| >
.giganews.com!nntp.giganews.com!postnews.google.com!m36g2000hse.googlegroup­­
s
| > .com!not-for-mail
| > | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:47591
| > | X-Tomcat-NG: microsoft.public.windows.server.sbs
| > |
| > | Hello Terence Liu
| > | Appreciate your quick response. And sorry for delay
| > | Yes I have 2 groups Business office and admin group. Were business
| > | office group already have access to limited websites .I want to give
| > | Yahoo and Hotmail sites to receive and send their mails. All the other
| > | web site is working fine except yahoo and hotmail as shown in snap
| > | shot from client desktop.
| > | Yes the HTTPS protocol rule is enabled on business office group as
| > | shown in snap shot.
| > | We are using SBS 2003 standard edition.
| > | The file for the MPSRPT_NETWORK.exe executed on ISA Server.
| > | The ISAinfo.vbe document is not there in the isatool.org server for
| > | downloading .Let me know if you have any alternative for the
| > | isainfo.vbe to download.
| > | Kindly check the three attachments KHISA_MPSReports_MDAC.cab run on
| > | isa server,
| > | snap shots send to your mail address
| > | v-ter...@xxxxxxxxxxxxxxxxxxxx for server settings and client error
| > | page when logging in yahoo and hotmail page.
| > | On Jul 2, 7:15 am, v-ter...@xxxxxxxxxxxxxxxxxxxx (Terence Liu[MSFT])| wrote:

| >
| > | > Hello Syed,
| > | >
| > | > Thank you for posting here.
| > | >
| > | > According to your description, I understand that you want Business
| > office
| > | > group only to access 3 web sites, but you get error page when logon
| > yahoo
| > | > mail and hotmail. If I have misunderstood the problem, please don't
| > | > hesitate to let me know.
| > | >
| > | > Based on my research, in SBS, after you run ...

read more »

Dear Terence Liu,


Thanks for your co-operation and kind support to resolve my issue .

Both mails yahoo & Hotmail are working fine as you provide the
solution .

If i Installed other NIC on the SBS server .The whole configuration
for LAT we need to change it or just assign other IP and gateway to
it .Presently IP route for all network is pointing to our Internet
router .

See if you can help me in this matter .

Thanking you again and appreciate your assistance in this regards.




.



Relevant Pages

  • RE: Web proxy returns Error code 502 (12202)
    ... Microsoft CSS Online Newsgroup Support ... Please open the ISA management console, navigate to Firewall Policy, ... cleared the web proxy cache ... For now, I will restore the ISA server settings. ...
    (microsoft.public.isa)
  • RE: Web proxy returns Error code 502 (12202)
    ... Microsoft CSS Online Newsgroup Support ... Please open the ISA management console, navigate to Firewall Policy, ... cleared the web proxy cache ... For now, I will restore the ISA server settings. ...
    (microsoft.public.isa)
  • Re: Access rule for Hotmail & Yahoo mail in ISA 2000 server
    ... this domain is not allow by your ISA ... This newsgroup only focuses on SBS technical issues. ... you may want to contact Microsoft CSS directly. ... |> Do you buy a standard ISA server 2000 copy and install it on your SBS? ...
    (microsoft.public.windows.server.sbs)
  • Re: REPOST: Firewall Client Disconnects
    ... >> Subject: Firewall Client disconnects? ... >> reported it was unable to connect to the ISA server. ... >> Thank you for posting to the SBS Newsgroup. ...
    (microsoft.public.windows.server.sbs)
  • Re: Error 403 Forbidden
    ... his email address, not the newsgroup. ... the ISA log should be collect after 4 hours or more after ... you may want to contact Microsoft CSS directly. ... >>> rights. ...
    (microsoft.public.windows.server.sbs)

Loading