Yeah, I'm stumped also. Originally people outside the firewall couldn't
access the IMail web messaging service. I opened port 80 to everything.
They could then access IMail. For grins I started closing portions of the
port down through the firewall. When I got back to the original
configuration of only letting the www service through they could magically
see the IMail messaging service. Now I might believe in magic but I don't
want to rely on it. That's why I'm pursuing this. As of now Whatsup is my
only indication that I wasn't imagining it.
-----Original Message-----
From: Vaughn Thurman [SMTP:[EMAIL PROTECTED]]
Sent: Friday, June 25, 1999 11:14 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] Slightly Off-Topic {IMail/Firewall/What's Up}
If you disable the firewall set then What's up behaves the same... do folks
outside the wall see any difference?
I am really getting short of ideas!
I will set an IMAIL tester to run on port 80 here and see if WsUp can see
it... get back to you later.
-V
----- Original Message -----
From: Jim Sheldon <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, June 25, 1999 10:44 AM
Subject: RE: [IMail Forum] Slightly Off-Topic {IMail/Firewall/What's Up}
> I'm using Secure Connect for Ascend Routers. The firewall is being
> positioned between the router and the WAN. I can disable it and Whatsup
> acts the same. I tried just putting the machine name in, thinking along
the
> same lines as you, and nothing changed. I have it using TCP and the help
> screen says it will accept and IP or a host name if using TCP.
>
> -----Original Message-----
> From: Vaughn Thurman [SMTP:[EMAIL PROTECTED]]
> Sent: Thursday, June 24, 1999 9:54 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [IMail Forum] Slightly Off-Topic {IMail/Firewall/What's Up}
>
> I am thinking that maybe the what's up is resolving a "machine name
> address"
> that is not serviced by IMAIL, but that is seeming less likely now that I
> have thought about that more. What kind of firewall are you using?
> Have you told the firewall to answer for those addresses?
> Is your firewall only answering for those addresses on the external card?
> I am thinking now of a scenario I saw once where a firewall had a filter
> configured backwards and the internal card was answering for the proxy
> rather than the external card. This did not bother NT traffic internally
> for a few days since most of the machines had "cached arps" that gave the
> right mac address, but later things started getting weird. The
similarity
> is that people outside could not get in and that machines that did not
> normally connect to that machine inside the wall could not establish new
> connections to that port/ that IP. Just something to look at... If you
> turn
> the firewall off and restart the machine with WUp can you then see the
> IMAIL
> box running?
>
> One more thing... IPSWITCH... If you see this, is there any reason that
> WsUp
> would not be able to see IMAIL running on Port 80?
>
> -V
> ----- Original Message -----
> From: Jim Sheldon <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, June 24, 1999 3:40 PM
> Subject: RE: [IMail Forum] Slightly Off-Topic {IMail/Firewall/What's Up}
>
>
> > I have 2. One for my primary domain and one for a virtual domain. I'm
> > running my own DNS for the primary domain and the DNS for the virtual
> > domain is on a DNS maintained by my ISP (haven't moved it over yet).
The
> > server uses my local DNS and secondary DNS to resolve all addresses.
> >
> > -----Original Message-----
> > From: Vaughn Thurman [SMTP:[EMAIL PROTECTED]]
> > Sent: Thursday, June 24, 1999 1:59 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [IMail Forum] Slightly Off-Topic {Imail/Firewall/What's
Up}
> >
> > Do you have more than one IP on the IMAIL box in question?
> > How do you resolve names internally?
> > -V
> > ----- Original Message -----
> > From: Jim Sheldon <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Thursday, June 24, 1999 1:30 PM
> > Subject: Re: [IMail Forum] Slightly Off-Topic {Imail/Firewall/What's
Up}
> >
> >
> > > Okay, I was mistaken. I had the IP being scanned in Whatsup. When I
put
> > the
> > > FQDN in it wouldn't resolve it and found nothing. On the same machine
> > > Everything else is able to resolve the FQDN to the IP.
Interestingly,
> > while
> > > observing the scan process, I noticed that the www scan would not
time
> > out.
> > > It immediately decided that whatever replay it got was not a www.
> > Observing
> > > the same scan on a server with no www service whatsoever I noticed
that
> > when
> > > scanning it would time out on the www scan. This tells me the port is
> 80
> > and
> > > its responding with something but not quite what Whatsup is looking
> for.
> > > Maybe thats what is making my firewall erroneously block that port.
> > >
> > > ----- Original Message -----
> > > From: Vaughn Thurman <[EMAIL PROTECTED]>
> > > To: <[EMAIL PROTECTED]>
> > > Sent: Thursday, June 24, 1999 12:03 PM
> > > Subject: Re: [IMail Forum] Slightly Off-Topic {Imail/Firewall/What's
> Up}
> > >
> > >
> > > > I was not squeaking on the off-topic... just figured the rest of
the
> > gang
> > > > might not be too interested if we headed off into the depths of the
> > What's
> > > > up Gold arena a bit. That's why I said "slightly" So with that
out
> of
> > > the
> > > > way...
> > > >
> > > > If you set What's-up to use the IP rather than the FQDN will a scan
> > find
> > > the
> > > > WebMail Service on :80? I am curious to find the answers here with
> you
> > on
> > > > this issue.
> > > >
> > > > -V
> > > >
> > > >
> > > >
> > > >
> > > > ----- Original Message -----
> > > > From: Jim Sheldon <[EMAIL PROTECTED]>
> > > > To: <[EMAIL PROTECTED]>
> > > > Sent: Thursday, June 24, 1999 12:43 PM
> > > > Subject: RE: [IMail Forum] Slightly Off-Topic
{Imail/Firewall/What's
> > Up}
> > > >
> > > >
> > > > > Yes, they are on the same subnet. I was using the FQDN, didn't
> check
> > the
> > > > > IP. Yes, I scanned the ip - didn't find the www service. Checked
> the
> > > www
> > > > > service manually and it still didn't find it. And, I found that
> > Whatsup
> > > > > Gold will scan and find the Imail messaging service normally. As
> far
> > as
> > > > off
> > > > > topic. I'm just using Whatsup as a tool to trouble shoot the
> > differences
> > > > > between Imail web messaging and run of the mill web services.
There
> > is
> > > > > obviously something triggering my firewall and keeping Whatsup
from
> > > > > monitoring it. I'm not requesting help with Whatsup, I'm
requesting
> > > > > information on Imail. Without knowing what triggered the firewall
I
> > > don't
> > > > > trust that it will keep passing the Imail web messaging reliably.
> > > > >
> > > > > -----Original Message-----
> > > > > From: Vaughn Thurman [SMTP:[EMAIL PROTECTED]]
> > > > > Sent: Thursday, June 24, 1999 10:40 AM
> > > > > To: [EMAIL PROTECTED]
> > > > > Subject: Re: [IMail Forum] Slightly Off-Topic
> {Imail/Firewall/What's
> > Up}
> > > > >
> > > > > Are the two boxes on the same subnet?
> > > > > Are you using the DNS FQDN to hit the server or the IP?
> > > > > Did you run the scan from What's up or just enter HTTP as a
service
> > to
> > > > > check
> > > > > for?
> > > > > -V
> > > > >
> > > > > ----- Original Message -----
> > > > > From: Jim Sheldon <[EMAIL PROTECTED]>
> > > > > To: <[EMAIL PROTECTED]>
> > > > > Sent: Thursday, June 24, 1999 8:42 AM
> > > > > Subject: Re: [IMail Forum] firewall
> > > > >
> > > > >
> > > > > > You're right I'm not allowing ICMP through the firewall, but
> > Whatsup
> > > is
> > > > > > inside the firewall with Imail.
> > > > > >
> > > > > > ----- Original Message -----
> > > > > > From: Vaughn Thurman <[EMAIL PROTECTED]>
> > > > > > To: <[EMAIL PROTECTED]>
> > > > > > Sent: Wednesday, June 23, 1999 8:37 PM
> > > > > > Subject: Re: [IMail Forum] firewall
> > > > > >
> > > > > >
> > > > > > > What's Up uses ICMP and TCP, Most Firewalls allow only TCP
> > through
> > > on
> > > > > > > standard setup. Try setting What's up to use TCP only and it
> > should
> > > > be
> > > > > > > happier. Or (less secure) open up ICMP to the Web server.
> > > > > > > -V
> > > > > > > ----- Original Message -----
> > > > > > > From: Jim Sheldon <[EMAIL PROTECTED]>
> > > > > > > To: <[EMAIL PROTECTED]>
> > > > > > > Sent: Wednesday, June 23, 1999 8:30 PM
> > > > > > > Subject: Re: [IMail Forum] firewall
> > > > > > >
> > > > > > >
> > > > > > > > Actually, I had changed the default port to 80 in web
> messaging
> > > > > manager
> > > > > > > and
> > > > > > > > it was working inside the firewall. I then decided I would
> just
> > > open
> > > > > 80
> > > > > > to
> > > > > > > > everything. I then started narrowing what could use port 80
> and
> > > when
> > > > > I
> > > > > > got
> > > > > > > > back to the original configuration web messaging was
working
> > > outside
> > > > > the
> > > > > > > > firewall. I don't know exactly what happened but its
working
> > now
> > > on
> > > > > port
> > > > > > > 80
> > > > > > > > through the firewall. Whatsup however still does not see it
> as
> > a
> > > www
> > > > > > > > service.
> > > > > > > >
> > > > > > > > ----- Original Message -----
> > > > > > > > From: Gregor Scott <[EMAIL PROTECTED]>
> > > > > > > > To: <[EMAIL PROTECTED]>
> > > > > > > > Sent: Wednesday, June 23, 1999 7:19 PM
> > > > > > > > Subject: RE: [IMail Forum] firewall
> > > > > > > >
> > > > > > > >
> > > > > > > > The web interface runs on Port 8383, not the default port
of
> > 80.
> > > try
> > > > > > > > allowing that port through your firewall.
> > > > > > > >
> > > > > > > > Gregor
> > > > > > > >
> > > > > > > > -----Original Message-----
> > > > > > > > From: [EMAIL PROTECTED]
> > > > > > > > [mailto:[EMAIL PROTECTED]]On Behalf Of
Jim
> > > Sheldon
> > > > > > > > Sent: Thursday, 24 June 1999 12:42
> > > > > > > > To: IMail Forum (E-mail)
> > > > > > > > Subject: [IMail Forum] firewall
> > > > > > > >
> > > > > > > >
> > > > > > > > I just put up my firewall and discovered I can't get the
web
> > > > > messaging
> > > > > > to
> > > > > > > > work through it. I have setup the web messaging port as 80
so
> > that
> > > > it
> > > > > > > would
> > > > > > > > be a normal www service. Apparently there is something
> special
> > > about
> > > > > the
> > > > > > > > web interface. If I open the firewall for www for that
server
> > it
> > > > > won't
> > > > > > let
> > > > > > > > it pass and Whatsup (an ipswitch network monitoring
program)
> > > doesn't
> > > > > > > > recognize that it has a www service running either.
> > > > > > > >
> > > > > > > > Any Ideas?
> > > > > > > >
> > > > > > > > Jim Sheldon
> > > > > > > > Texas Communications
> > > > > > > > 409-775-6239
> > > > > > > > http://www.texascom.com
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>
