easy ISA question?

I'm running SBS2k.

I'm working on trying to limit a packet filter to a specific range of
external computers - not just one IP... (It works correctly right now with
the "All remote computers" option, but I want to limit the remote access for
security reasons)... So, after the packet filter is set up, if I choose
properties on the Remote Computer tab, there is an option "This range of
computers". Since my user has a dynamic IP - but it is always an IP within
a certain range, can I setup a subnet/mask to only allow computers from her
IP range? How do I do that? I'm not 100% how subnet and mask relate - I
guess I expected the choice to be more of a range like 24.x.x.x to 24.y.y.y
or something like that...

franzf
Mon Sep 01 13:17:35 CDT 2003

Alex,

Have you tried creating a Client Address set before creating a Protocol
Rule? The protocol rule can allow specific computers based on IP address.
You can also use Server Publishing as a control feature.

295667 How to Allow Third-Party Internet Application Connections Through ISA
http://support.microsoft.com/?id=295667

301351 Server Publishing Rules May Not Permit Inbound UDP Packets Through to
http://support.microsoft.com/?id=301351

306071 How to Publish a TCP/IP Printer Behind ISA Server
http://support.microsoft.com/?id=306071

Franz Foster
Microsoft Technical Support
franzf@online.microsoft.com
This posting is provided "AS IS" with no warranties, and confers no rights.