topic Re: Flickr uploading tool via ISA2000 in Network Security

Flickr uploading tool via ISA2000

mark.a.coleman — Mon, 11 Mar 2019 19:31:05 GMT

Strange issue this,

I have a flickr upload tool, when using direct through our ASA5510, upalds are fine.

The problem is when the request comes via our proxy using ISA2000 it never works (my pc > proxy > asa). Watching the logs, the destination port seems to go in a loop and increment by 1

Here's a screenshot.

Any ideas?

Re: Flickr uploading tool via ISA2000

Javier Zamora — Thu, 06 Jan 2011 17:35:22 GMT

According to the logs it seems that the connection initiate and terminate properly due to a TCP Fin. What is incrementing is the source port, which is an expected behavior.

The next step will be to get some captures of both interfaces to check what is the actual behavior of the traffic and if the ISA is doing something to the session that the ASA might not like.

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Fri, 07 Jan 2011 09:13:40 GMT

What's the best way using ASDM for the firewall and is there a tool I could use for the windows server running ISA?

Re: Flickr uploading tool via ISA2000

Javier Zamora — Fri, 07 Jan 2011 14:13:34 GMT

Here is a guide that shows how to go throgh the capture wizard.

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080a9edd6.shtml#configurationPACKETCAP

The idea is to see the traffic is it goes through both interfaces.

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Fri, 07 Jan 2011 15:04:10 GMT

Ok, I can see captures for the inside (ingress), but nothing on the outside.

Since I and the ISA server and my PC have full internet access, I can't see it being the firewall rule and moreso what the ISA server is doing with the data. Do you need me to add any of the capture data?

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Fri, 07 Jan 2011 15:25:47 GMT

Just tested again from my PC (removed proxy from IE settings) and got the same results in the capture log, but the flickr upload completed.

Re: Flickr uploading tool via ISA2000

Javier Zamora — Fri, 07 Jan 2011 16:14:32 GMT

It might be a matter of how the captures are taken. If you use PAT with the outside interface you can try the following commands:

access-list capin permit ip host Mataura host 68.142.214.24
access-list capin permit ip host 68.142.214.24 host Mataura
capture capin access-list capin pack 1520 interface inside
access-list capout permit ip interface outside host 68.142.214.24
access-list capout permit ip host 68.142.214.24 interface outside
capture capout access-list capout pack 1520 interface outside

To download them you use something like this:

http://ip of the interface/capture/capin/pcap

http://ip of the interface/capture/capout/pcap

If you see output on both upload them so I can take a look

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Mon, 10 Jan 2011 09:59:04 GMT

I've not used PAT though I find it strange that I'm seeing nothing in the capture window for outside interface.

Re: Flickr uploading tool via ISA2000

Javier Zamora — Mon, 10 Jan 2011 13:32:24 GMT

In that case if you can post a "show local Mataura" so we can better understand how are you traversing the firewall and if possible the configuration to take a look.

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Mon, 10 Jan 2011 14:50:31 GMT

Mataura is my PC, Makassar is the ISA Server.

Though I'm scepitcal showing configuration on a public forum.

Is there a secure area I can show the information?

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Mon, 17 Jan 2011 11:54:13 GMT

Would appreciate a way to move forward on this

Re: Flickr uploading tool via ISA2000

Javier Zamora — Mon, 17 Jan 2011 13:30:43 GMT

If you don't want to post the config for the moment that is Ok. Gather the outputs of "show local Mataura" and "show local Makassar" we

hen trying to connect so we can better understand why you are not seeing captures on the outside.

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Mon, 17 Jan 2011 14:14:28 GMT

Result of the command: "show local Mataura"

Interface management: 0 active, 0 maximum active, 0 denied
Interface outside: 1247 active, 1921 maximum active, 0 denied
Interface WDMZ4: 0 active, 0 maximum active, 0 denied
Interface WDMZ3: 0 active, 3 maximum active, 0 denied
Interface WDMZ2: 0 active, 5 maximum active, 0 denied
Interface WDMZ1: 3 active, 12 maximum active, 0 denied
Interface DMZ4: 1 active, 51 maximum active, 0 denied
Interface DMZ3: 2 active, 3 maximum active, 0 denied
Interface DMZ2: 1 active, 2 maximum active, 0 denied
Interface DMZ1: 3 active, 9 maximum active, 0 denied
Interface inside: 27 active, 28 maximum active, 0 denied

Result of the command: "show local Makassar"

Interface management: 0 active, 0 maximum active, 0 denied
Interface outside: 1254 active, 1921 maximum active, 0 denied
Interface WDMZ4: 0 active, 0 maximum active, 0 denied
Interface WDMZ3: 0 active, 3 maximum active, 0 denied
Interface WDMZ2: 0 active, 5 maximum active, 0 denied
Interface WDMZ1: 3 active, 12 maximum active, 0 denied
Interface DMZ4: 1 active, 51 maximum active, 0 denied
Interface DMZ3: 2 active, 3 maximum active, 0 denied
Interface DMZ2: 1 active, 2 maximum active, 0 denied
Interface DMZ1: 3 active, 9 maximum active, 0 denied
Interface inside: 26 active, 28 maximum active, 0 denied
local host: ,
    TCP flow count/limit = 96/unlimited
    TCP embryonic count to host = 0
    TCP intercept watermark = unlimited
    UDP flow count/limit = 0/unlimited

Xlate:
    PAT Global 62.173.122.214(5602) Local Makassar(16830)
    PAT Global 62.173.122.214(41484) Local Makassar(16829)
    PAT Global 62.173.122.214(39750) Local Makassar(16828)
    PAT Global 62.173.122.214(32397) Local Makassar(16827)
    PAT Global 62.173.122.214(28718) Local Makassar(16824)
    PAT Global 62.173.122.214(49911) Local Makassar(16823)
    PAT Global 62.173.122.214(33748) Local Makassar(16822)
    PAT Global 62.173.122.214(46163) Local Makassar(16821)
    PAT Global 62.173.122.214(59057) Local Makassar(16820)
    PAT Global 62.173.122.214(46819) Local Makassar(16819)
    PAT Global 62.173.122.214(12720) Local Makassar(16818)
    PAT Global 62.173.122.214(15885) Local Makassar(16817)
    PAT Global 62.173.122.214(47305) Local Makassar(16816)
    PAT Global 62.173.122.214(31683) Local Makassar(16815)
    PAT Global 62.173.122.214(44672) Local Makassar(16814)
    PAT Global 62.173.122.214(44996) Local Makassar(16813)
    PAT Global 62.173.122.214(11481) Local Makassar(16812)
    PAT Global 62.173.122.214(46802) Local Makassar(16811)
    PAT Global 62.173.122.214(53777) Local Makassar(16810)
    PAT Global 62.173.122.214(59233) Local Makassar(16809)
    PAT Global 62.173.122.214(23565) Local Makassar(16808)
    PAT Global 62.173.122.214(31615) Local Makassar(16807)
    PAT Global 62.173.122.214(15778) Local Makassar(16806)
    PAT Global 62.173.122.214(14496) Local Makassar(16805)
    PAT Global 62.173.122.214(1603) Local Makassar(16804)
    PAT Global 62.173.122.214(13259) Local Makassar(16803)
    PAT Global 62.173.122.214(35573) Local Makassar(16802)
    PAT Global 62.173.122.214(45881) Local Makassar(16801)
    PAT Global 62.173.122.214(15076) Local Makassar(16800)
    PAT Global 62.173.122.214(44433) Local Makassar(16799)
    PAT Global 62.173.122.214(35602) Local Makassar(16798)
    PAT Global 62.173.122.214(44792) Local Makassar(16797)
    PAT Global 62.173.122.214(9453) Local Makassar(16796)
    PAT Global 62.173.122.214(30057) Local Makassar(16795)
    PAT Global 62.173.122.214(36507) Local Makassar(16794)
    PAT Global 62.173.122.214(40672) Local Makassar(16793)
    PAT Global 62.173.122.214(51327) Local Makassar(16792)
    PAT Global 62.173.122.214(37699) Local Makassar(16791)
    PAT Global 62.173.122.214(64710) Local Makassar(16790)
    PAT Global 62.173.122.214(61725) Local Makassar(16789)
    PAT Global 62.173.122.214(53785) Local Makassar(16788)
    PAT Global 62.173.122.214(13530) Local Makassar(16787)
    PAT Global 62.173.122.214(44435) Local Makassar(16786)
    PAT Global 62.173.122.214(9852) Local Makassar(16785)
    PAT Global 62.173.122.214(43009) Local Makassar(16784)
    PAT Global 62.173.122.214(15147) Local Makassar(16783)
    PAT Global 62.173.122.214(20192) Local Makassar(16782)
    PAT Global 62.173.122.214(45263) Local Makassar(16781)
    PAT Global 62.173.122.214(2670) Local Makassar(16780)
    PAT Global 62.173.122.214(25031) Local Makassar(16779)
    PAT Global 62.173.122.214(39892) Local Makassar(16778)
    PAT Global 62.173.122.214(63235) Local Makassar(16777)
    PAT Global 62.173.122.214(41181) Local Makassar(16776)
    PAT Global 62.173.122.214(16354) Local Makassar(16775)
    PAT Global 62.173.122.214(37304) Local Makassar(16774)
    PAT Global 62.173.122.214(14559) Local Makassar(16773)
    PAT Global 62.173.122.214(8027) Local Makassar(16772)
    PAT Global 62.173.122.214(25188) Local Makassar(16771)
    PAT Global 62.173.122.214(34882) Local Makassar(16770)
    PAT Global 62.173.122.214(26905) Local Makassar(16769)
    PAT Global 62.173.122.214(13512) Local Makassar(16768)
    PAT Global 62.173.122.214(44015) Local Makassar(16767)
    PAT Global 62.173.122.214(24026) Local Makassar(16766)
    PAT Global 62.173.122.214(11131) Local Makassar(16765)
    PAT Global 62.173.122.214(28983) Local Makassar(16764)
    PAT Global 62.173.122.214(29437) Local Makassar(16763)
    PAT Global 62.173.122.214(59066) Local Makassar(16762)
    PAT Global 62.173.122.214(3789) Local Makassar(16761)
    PAT Global 62.173.122.214(19603) Local Makassar(16760)
    PAT Global 62.173.122.214(36399) Local Makassar(16759)
    PAT Global 62.173.122.214(46903) Local Makassar(16758)
    PAT Global 62.173.122.214(42548) Local Makassar(16757)
    PAT Global 62.173.122.214(53820) Local Makassar(16756)
    PAT Global 62.173.122.214(63032) Local Makassar(16755)
    PAT Global 62.173.122.214(15093) Local Makassar(16754)
    PAT Global 62.173.122.214(5711) Local Makassar(16743)
    PAT Global 62.173.122.214(17230) Local Makassar(16710)
    PAT Global 62.173.122.214(4123) Local Makassar(16706)
    PAT Global 62.173.122.214(28525) Local Makassar(16691)
    PAT Global 62.173.122.214(41448) Local Makassar(16684)
    PAT Global 62.173.122.214(25277) Local Makassar(16675)
    PAT Global 62.173.122.214(10417) Local Makassar(16674)
    PAT Global 62.173.122.214(38457) Local Makassar(16673)
    PAT Global 62.173.122.214(8129) Local Makassar(16672)
    PAT Global 62.173.122.214(42480) Local Makassar(16639)
    PAT Global 62.173.122.214(42410) Local Makassar(16629)
    PAT Global 62.173.122.214(16727) Local Makassar(16628)
    PAT Global 62.173.122.214(27644) Local Makassar(16578)
    PAT Global 62.173.122.214(43635) Local Makassar(16574)
    PAT Global 62.173.122.214(38245) Local Makassar(16483)
    PAT Global 62.173.122.214(64105) Local Makassar(16363)
    PAT Global 62.173.122.214(59316) Local Makassar(16354)
    PAT Global 62.173.122.214(64295) Local Makassar(16352)
    PAT Global 62.173.122.214(19417) Local Makassar(16342)
    PAT Global 62.173.122.214(30740) Local Makassar(16296)
    PAT Global 62.173.122.214(62080) Local Makassar(16294)
    PAT Global 62.173.122.214(21241) Local Makassar(16284)
    PAT Global 62.173.122.214(22092) Local Makassar(16283)
    PAT Global 62.173.122.214(14419) Local Makassar(16282)
    PAT Global 62.173.122.214(42791) Local Makassar(16278)
    PAT Global 62.173.122.214(33970) Local Makassar(16277)
    PAT Global 62.173.122.214(9883) Local Makassar(16276)
    PAT Global 62.173.122.214(32743) Local Makassar(16275)
    PAT Global 62.173.122.214(20300) Local Makassar(16273)
    PAT Global 62.173.122.214(31925) Local Makassar(16269)
    PAT Global 62.173.122.214(3591) Local Makassar(16268)
    PAT Global 62.173.122.214(52230) Local Makassar(16267)
    PAT Global 62.173.122.214(21813) Local Makassar(16265)
    PAT Global 62.173.122.214(51321) Local Makassar(16264)
    PAT Global 62.173.122.214(37830) Local Makassar(16248)
    PAT Global 62.173.122.214(42750) Local Makassar(16226)
    PAT Global 62.173.122.214(45023) Local Makassar(16208)
    PAT Global 62.173.122.214(59397) Local Makassar(16207)
    PAT Global 62.173.122.214(54115) Local Makassar(16206)
    PAT Global 62.173.122.214(59400) Local Makassar(16205)
    PAT Global 62.173.122.214(53320) Local Makassar(16201)
    PAT Global 62.173.122.214(19350) Local Makassar(16192)
    PAT Global 62.173.122.214(6031) Local Makassar(16189)
    PAT Global 62.173.122.214(34849) Local Makassar(16174)
    PAT Global 62.173.122.214(31868) Local Makassar(16170)
    PAT Global 62.173.122.214(44194) Local Makassar(16165)
    PAT Global 62.173.122.214(53368) Local Makassar(16164)
    PAT Global 62.173.122.214(64284) Local Makassar(16161)
    PAT Global 62.173.122.214(63638) Local Makassar(16158)
    PAT Global 62.173.122.214(38969) Local Makassar(16148)
    PAT Global 62.173.122.214(60134) Local Makassar(16147)
    PAT Global 62.173.122.214(43984) Local Makassar(16146)
    PAT Global 62.173.122.214(42217) Local Makassar(16125)
    PAT Global 62.173.122.214(32772) Local Makassar(16117)
    PAT Global 62.173.122.214(2963) Local Makassar(16116)
    PAT Global 62.173.122.214(61954) Local Makassar(16114)
    PAT Global 62.173.122.214(32664) Local Makassar(16108)
    PAT Global 62.173.122.214(50733) Local Makassar(16086)
    PAT Global 62.173.122.214(34841) Local Makassar(16076)
    PAT Global 62.173.122.214(63585) Local Makassar(16064)
    PAT Global 62.173.122.214(53379) Local Makassar(16034)
    PAT Global 62.173.122.214(17471) Local Makassar(16032)
    PAT Global 62.173.122.214(19068) Local Makassar(16031)
    PAT Global 62.173.122.214(46839) Local Makassar(16015)
    PAT Global 62.173.122.214(45386) Local Makassar(16013)
    PAT Global 62.173.122.214(6531) Local Makassar(16005)
    PAT Global 62.173.122.214(18418) Local Makassar(16004)
    PAT Global 62.173.122.214(49281) Local Makassar(16001)
    PAT Global 62.173.122.214(42162) Local Makassar(15987)
    PAT Global 62.173.122.214(10834) Local Makassar(15946)
    PAT Global 62.173.122.214(23388) Local Makassar(15942)
    PAT Global 62.173.122.214(4172) Local Makassar(15932)
    PAT Global 62.173.122.214(65215) Local Makassar(15930)
    PAT Global 62.173.122.214(18817) Local Makassar(15772)
    PAT Global 62.173.122.214(34266) Local Makassar(15692)
    PAT Global 62.173.122.214(41533) Local Makassar(15686)
    PAT Global 62.173.122.214(17195) Local Makassar(15664)
    PAT Global 62.173.122.214(19401) Local Makassar(15556)
    PAT Global 62.173.122.214(37939) Local Makassar(15510)
    PAT Global 62.173.122.214(10412) Local Makassar(14861)
    PAT Global 62.173.122.214(58172) Local Makassar(14682)
    PAT Global 62.173.122.214(9905) Local Makassar(12199)
    PAT Global 62.173.122.214(12460) Local Makassar(8201)
    PAT Global 62.173.122.214(17233) Local Makassar(1430)

Conn:
    TCP outside 217.135.36.203:443 inside Makassar:16830, idle 0:00:00, bytes 6307, flags UIO
    TCP outside 217.135.36.203:443 inside Makassar:16828, idle 0:00:00, bytes 2809, flags UIO
    TCP outside 62.239.21.146:443 inside Makassar:16824, idle 0:00:01, bytes 11643, flags UIO
    TCP outside 209.85.143.99:443 inside Makassar:16809, idle 0:00:09, bytes 1320, flags UIO
    TCP outside 2.20.50.64:443 inside Makassar:16806, idle 0:00:13, bytes 5956, flags UIO
    TCP outside 2.20.50.64:443 inside Makassar:16805, idle 0:00:15, bytes 27012, flags UIO
    TCP outside 2.20.50.64:443 inside Makassar:16804, idle 0:00:13, bytes 5569, flags UIO
    TCP outside 2.20.50.64:443 inside Makassar:16803, idle 0:00:15, bytes 4594, flags UIO
    TCP outside 213.199.149.179:80 inside Makassar:16799, idle 0:00:14, bytes 1434, flags UFRIO
    TCP outside 2.20.50.64:443 inside Makassar:16796, idle 0:00:15, bytes 24687, flags UIO
    TCP outside 2.20.50.64:443 inside Makassar:16789, idle 0:00:15, bytes 16461, flags UIO
    TCP outside 92.123.65.32:80 inside Makassar:16743, idle 0:00:36, bytes 700, flags UIO
    TCP outside 88.221.176.170:80 inside Makassar:16706, idle 0:00:43, bytes 2139, flags UIO
    TCP outside 66.220.156.32:80 inside Makassar:16691, idle 0:00:44, bytes 1577, flags UIO
    TCP outside 69.94.29.199:80 inside Makassar:16684, idle 0:00:41, bytes 2070, flags UFRIO
    TCP outside 74.125.79.102:80 inside Makassar:16675, idle 0:00:47, bytes 2797, flags UIO
    TCP outside 209.85.146.139:80 inside Makassar:16674, idle 0:00:47, bytes 1237, flags UIO
    TCP outside 209.85.146.139:80 inside Makassar:16673, idle 0:00:47, bytes 1243, flags UIO
    TCP outside 209.85.146.132:80 inside Makassar:16672, idle 0:00:48, bytes 12357, flags UIO
    TCP outside 192.221.115.254:80 inside Makassar:16629, idle 0:01:00, bytes 462, flags UFRIO
    TCP outside 192.221.115.254:80 inside Makassar:16628, idle 0:01:00, bytes 473, flags UFRIO
    TCP outside 204.50.113.180:80 inside Makassar:16578, idle 0:00:23, bytes 4470, flags UIO
    TCP outside 63.215.202.49:80 inside Makassar:16574, idle 0:00:05, bytes 120456, flags UIO
    TCP outside 209.85.143.100:80 inside Makassar:16483, idle 0:01:36, bytes 454, flags UIO
    TCP outside 173.194.37.154:80 inside Makassar:16363, idle 0:00:05, bytes 192905, flags UIO
    TCP outside 193.227.244.121:80 inside Makassar:16354, idle 0:02:45, bytes 20835, flags UFRIO
    TCP outside 87.239.16.209:80 inside Makassar:16352, idle 0:03:02, bytes 7078, flags UFRIO
    TCP outside 216.34.207.176:80 inside Makassar:16342, idle 0:00:05, bytes 86673, flags UIO
    TCP outside 207.46.216.54:80 inside Makassar:16296, idle 0:00:21, bytes 1133, flags UIO
    TCP outside 2.19.149.115:80 inside Makassar:16294, idle 0:00:47, bytes 5518, flags UIO
    TCP outside 209.85.146.104:80 inside Makassar:16284, idle 0:03:44, bytes 11000, flags UIO
    TCP outside 209.85.146.147:80 inside Makassar:16283, idle 0:03:44, bytes 2508, flags UIO
    TCP outside 209.85.146.102:80 inside Makassar:16282, idle 0:03:45, bytes 11278, flags UIO
    TCP outside 209.85.143.100:80 inside Makassar:16278, idle 0:03:44, bytes 12183, flags UIO
    TCP outside 209.85.143.100:80 inside Makassar:16277, idle 0:03:45, bytes 5691, flags UIO
    TCP outside 209.85.143.101:80 inside Makassar:16276, idle 0:03:45, bytes 7749, flags UIO
    TCP outside 209.85.143.100:80 inside Makassar:16275, idle 0:03:45, bytes 2974, flags UIO
    TCP outside 209.85.143.104:80 inside Makassar:16273, idle 0:03:45, bytes 1307, flags UIO
    TCP outside 209.85.143.100:80 inside Makassar:16269, idle 0:03:45, bytes 21539, flags UIO
    TCP outside 209.85.143.100:80 inside Makassar:16268, idle 0:03:45, bytes 34750, flags UIO
    TCP outside 209.85.146.103:80 inside Makassar:16267, idle 0:03:44, bytes 5801, flags UIO
    TCP outside 209.85.143.101:80 inside Makassar:16265, idle 0:03:45, bytes 29906, flags UIO
    TCP outside 209.85.146.99:80 inside Makassar:16264, idle 0:03:45, bytes 4528, flags UIO
    TCP outside 69.63.190.14:80 inside Makassar:16248, idle 0:00:47, bytes 16108, flags UIO
    TCP outside 87.248.210.253:80 inside Makassar:16226, idle 0:04:13, bytes 228427, flags UFRIO
    TCP outside 178.250.0.78:80 inside Makassar:16208, idle 0:04:07, bytes 2636, flags UFRIO
    TCP outside 178.250.0.78:80 inside Makassar:16207, idle 0:04:07, bytes 4686, flags UFRIO
    TCP outside 178.250.0.78:80 inside Makassar:16206, idle 0:04:07, bytes 6694, flags UFRIO
    TCP outside 178.250.0.78:80 inside Makassar:16205, idle 0:04:07, bytes 3985, flags UFRIO
    TCP outside 209.85.146.96:80 inside Makassar:16201, idle 0:00:20, bytes 1071, flags UFRIO
    TCP outside 46.137.118.54:80 inside Makassar:16192, idle 0:03:20, bytes 6055, flags UFRIO
    TCP outside 178.250.1.71:80 inside Makassar:16189, idle 0:04:09, bytes 2014, flags UFRIO
    TCP outside 117.53.175.123:80 inside Makassar:16174, idle 0:03:17, bytes 8033, flags UFRIO
    TCP outside 93.184.220.20:80 inside Makassar:16170, idle 0:04:21, bytes 25324, flags UFRIO
    TCP outside 173.194.37.154:80 inside Makassar:16165, idle 0:00:49, bytes 71724, flags UIO
    TCP outside 209.85.146.166:80 inside Makassar:16164, idle 0:00:30, bytes 581, flags UFRIO
    TCP outside 207.32.176.84:80 inside Makassar:16161, idle 0:04:19, bytes 13118, flags UFRIO
    TCP outside 117.53.175.123:80 inside Makassar:16158, idle 0:03:19, bytes 169090, flags UFRIO
    TCP outside 204.2.197.201:80 inside Makassar:16148, idle 0:04:28, bytes 1947, flags UFRIO
    TCP outside 213.155.154.120:80 inside Makassar:16147, idle 0:04:37, bytes 1286, flags UIO
    TCP outside 2.18.124.20:80 inside Makassar:16146, idle 0:04:38, bytes 1671, flags UFRIO
    TCP outside 173.194.37.104:80 inside Makassar:16125, idle 0:00:50, bytes 3988, flags UIO
    TCP outside 95.100.188.20:80 inside Makassar:16117, idle 0:00:47, bytes 1706, flags UIO
    TCP outside 2.19.156.20:80 inside Makassar:16116, idle 0:04:57, bytes 2033, flags UIO
    TCP outside 92.122.127.9:80 inside Makassar:16114, idle 0:00:47, bytes 9141, flags UIO
    TCP outside 69.63.190.14:80 inside Makassar:16108, idle 0:04:57, bytes 6398, flags UIO
    TCP outside 216.34.207.176:80 inside Makassar:16086, idle 0:01:15, bytes 56612, flags UIO
    TCP outside 66.220.146.22:80 inside Makassar:16076, idle 0:04:18, bytes 5342, flags UIO
    TCP outside 63.215.202.49:80 inside Makassar:16064, idle 0:01:15, bytes 626370, flags UIO
    TCP outside 87.248.210.254:80 inside Makassar:16034, idle 0:06:19, bytes 487, flags UFRIO
    TCP outside 209.85.146.138:80 inside Makassar:16032, idle 0:00:47, bytes 24083, flags UIO
    TCP outside 194.62.234.53:80 inside Makassar:16031, idle 0:06:13, bytes 1776, flags UFRIO
    TCP outside 92.122.126.232:80 inside Makassar:16015, idle 0:06:23, bytes 2204, flags UIO
    TCP outside 173.194.37.148:80 inside Makassar:16013, idle 0:02:22, bytes 7021, flags UFRIO
    TCP outside 80.239.201.98:80 inside Makassar:16005, idle 0:06:26, bytes 1200, flags UIO
    TCP outside 77.238.187.43:80 inside Makassar:16004, idle 0:06:12, bytes 14759, flags UFRIO
    TCP outside 77.238.187.43:80 inside Makassar:16001, idle 0:06:12, bytes 681, flags UFRIO
    TCP outside 77.238.187.39:80 inside Makassar:15987, idle 0:06:11, bytes 24256, flags UFRIO
    TCP outside 77.238.187.39:80 inside Makassar:15946, idle 0:06:42, bytes 699, flags UFRIO
    TCP outside 173.194.37.148:80 inside Makassar:15942, idle 0:02:31, bytes 12262, flags UFRIO
    TCP outside 209.85.143.101:80 inside Makassar:15932, idle 0:00:53, bytes 13647, flags UIO
    TCP outside 209.85.143.101:80 inside Makassar:15930, idle 0:00:53, bytes 3596, flags UIO
    TCP outside 92.122.127.42:80 inside Makassar:15772, idle 0:04:19, bytes 10463, flags UIO
    TCP outside 92.122.126.219:80 inside Makassar:15692, idle 0:00:47, bytes 8699, flags UIO
    TCP outside 92.122.127.32:80 inside Makassar:15686, idle 0:00:34, bytes 8703, flags UIO
    TCP outside 92.122.208.16:80 inside Makassar:15664, idle 0:07:34, bytes 1422084, flags UIO
    TCP outside 173.194.37.104:80 inside Makassar:15556, idle 0:00:49, bytes 175775, flags UIO
    TCP outside 209.85.146.141:80 inside Makassar:15510, idle 0:01:43, bytes 6403, flags UFRIO
    TCP outside 92.122.126.249:80 inside Makassar:14861, idle 0:04:19, bytes 53151, flags UIO
    TCP outside 92.122.208.177:80 inside Makassar:14682, idle 0:04:20, bytes 138399, flags UIO
    TCP outside 66.220.145.40:80 inside Makassar:12199, idle 0:00:41, bytes 70687, flags UIO
    TCP outside 66.220.151.79:80 inside Makassar:8201, idle 0:00:06, bytes 102589, flags UIO
    TCP outside 92.122.127.243:80 inside Makassar:1430, idle 0:03:19, bytes 101371, flags UIO

Re: Flickr uploading tool via ISA2000

Javier Zamora — Wed, 19 Jan 2011 00:29:29 GMT

I am not seeing a connection to the address you specified or all the 68.142.x.x for that matter. Was this output taken during a test?

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Wed, 19 Jan 2011 12:48:05 GMT

Whoops

Result of the command: "show local Mataura"

Interface management: 0 active, 0 maximum active, 0 denied
Interface outside: 1092 active, 1921 maximum active, 0 denied
Interface WDMZ4: 0 active, 0 maximum active, 0 denied
Interface WDMZ3: 0 active, 3 maximum active, 0 denied
Interface WDMZ2: 2 active, 5 maximum active, 0 denied
Interface WDMZ1: 4 active, 12 maximum active, 0 denied
Interface DMZ4: 1 active, 51 maximum active, 0 denied
Interface DMZ3: 2 active, 3 maximum active, 0 denied
Interface DMZ2: 1 active, 2 maximum active, 0 denied
Interface DMZ1: 3 active, 9 maximum active, 0 denied
Interface inside: 18 active, 29 maximum active, 0 denied
local host: ,
    TCP flow count/limit = 0/unlimited
    TCP embryonic count to host = 0
    TCP intercept watermark = unlimited
    UDP flow count/limit = 0/unlimited

Xlate:
    PAT Global 62.173.122.214(2859) Local Mataura(64535)
    PAT Global 62.173.122.214(57946) Local Mataura(64534)
    PAT Global 62.173.122.214(44632) Local Mataura(64533)
    PAT Global 62.173.122.214(32534) Local Mataura(64532)
    PAT Global 62.173.122.214(2437) Local Mataura(64531)
    PAT Global 62.173.122.214(43433) Local Mataura(64530)
    PAT Global 62.173.122.214(55072) Local Mataura(64528)

Result of the command: "show local Makassar"

Interface management: 0 active, 0 maximum active, 0 denied
Interface outside: 1101 active, 1921 maximum active, 0 denied
Interface WDMZ4: 0 active, 0 maximum active, 0 denied
Interface WDMZ3: 0 active, 3 maximum active, 0 denied
Interface WDMZ2: 2 active, 5 maximum active, 0 denied
Interface WDMZ1: 5 active, 12 maximum active, 0 denied
Interface DMZ4: 1 active, 51 maximum active, 0 denied
Interface DMZ3: 2 active, 3 maximum active, 0 denied
Interface DMZ2: 1 active, 2 maximum active, 0 denied
Interface DMZ1: 3 active, 9 maximum active, 0 denied
Interface inside: 19 active, 29 maximum active, 0 denied
local host: ,
    TCP flow count/limit = 123/unlimited
    TCP embryonic count to host = 0
    TCP intercept watermark = unlimited
    UDP flow count/limit = 0/unlimited

Xlate:
    PAT Global 62.173.122.214(63126) Local Makassar(17955)
    PAT Global 62.173.122.214(3481) Local Makassar(17954)
    PAT Global 62.173.122.214(44945) Local Makassar(17953)
    PAT Global 62.173.122.214(45488) Local Makassar(17952)
    PAT Global 62.173.122.214(6494) Local Makassar(17951)
    PAT Global 62.173.122.214(44521) Local Makassar(17950)
    PAT Global 62.173.122.214(31544) Local Makassar(17949)
    PAT Global 62.173.122.214(35003) Local Makassar(17948)
    PAT Global 62.173.122.214(7715) Local Makassar(17947)
    PAT Global 62.173.122.214(52089) Local Makassar(17946)
    PAT Global 62.173.122.214(52131) Local Makassar(17945)
    PAT Global 62.173.122.214(9266) Local Makassar(17944)
    PAT Global 62.173.122.214(62981) Local Makassar(17943)
    PAT Global 62.173.122.214(45497) Local Makassar(17942)
    PAT Global 62.173.122.214(26870) Local Makassar(17941)
    PAT Global 62.173.122.214(2926) Local Makassar(17940)
    PAT Global 62.173.122.214(9349) Local Makassar(17939)
    PAT Global 62.173.122.214(41439) Local Makassar(17938)
    PAT Global 62.173.122.214(34530) Local Makassar(17937)
    PAT Global 62.173.122.214(24162) Local Makassar(17936)
    PAT Global 62.173.122.214(17843) Local Makassar(17935)
    PAT Global 62.173.122.214(27258) Local Makassar(17934)
    PAT Global 62.173.122.214(45946) Local Makassar(17933)
    PAT Global 62.173.122.214(56745) Local Makassar(17932)
    PAT Global 62.173.122.214(64076) Local Makassar(17931)
    PAT Global 62.173.122.214(38507) Local Makassar(17930)
    PAT Global 62.173.122.214(30396) Local Makassar(17929)
    PAT Global 62.173.122.214(47531) Local Makassar(17928)
    PAT Global 62.173.122.214(25604) Local Makassar(17927)
    PAT Global 62.173.122.214(27576) Local Makassar(17910)
    PAT Global 62.173.122.214(59521) Local Makassar(17909)
    PAT Global 62.173.122.214(49277) Local Makassar(17908)
    PAT Global 62.173.122.214(46628) Local Makassar(17907)
    PAT Global 62.173.122.214(18469) Local Makassar(17906)
    PAT Global 62.173.122.214(41433) Local Makassar(17905)
    PAT Global 62.173.122.214(51263) Local Makassar(17898)
    PAT Global 62.173.122.214(23690) Local Makassar(17894)
    PAT Global 62.173.122.214(7379) Local Makassar(17890)
    PAT Global 62.173.122.214(24714) Local Makassar(17873)
    PAT Global 62.173.122.214(13172) Local Makassar(17861)
    PAT Global 62.173.122.214(26892) Local Makassar(17858)
    PAT Global 62.173.122.214(41479) Local Makassar(17857)
    PAT Global 62.173.122.214(4278) Local Makassar(17856)
    PAT Global 62.173.122.214(16907) Local Makassar(17831)
    PAT Global 62.173.122.214(53572) Local Makassar(17830)
    PAT Global 62.173.122.214(26894) Local Makassar(17829)
    PAT Global 62.173.122.214(31143) Local Makassar(17824)
    PAT Global 62.173.122.214(32083) Local Makassar(17823)
    PAT Global 62.173.122.214(26511) Local Makassar(17822)
    PAT Global 62.173.122.214(59456) Local Makassar(17821)
    PAT Global 62.173.122.214(43307) Local Makassar(17820)
    PAT Global 62.173.122.214(55160) Local Makassar(17819)
    PAT Global 62.173.122.214(29951) Local Makassar(17814)
    PAT Global 62.173.122.214(26614) Local Makassar(17807)
    PAT Global 62.173.122.214(59249) Local Makassar(17801)
    PAT Global 62.173.122.214(11766) Local Makassar(17800)
    PAT Global 62.173.122.214(53558) Local Makassar(17786)
    PAT Global 62.173.122.214(39520) Local Makassar(17785)
    PAT Global 62.173.122.214(16947) Local Makassar(17782)
    PAT Global 62.173.122.214(7002) Local Makassar(17781)
    PAT Global 62.173.122.214(63366) Local Makassar(17777)
    PAT Global 62.173.122.214(44156) Local Makassar(17742)
    PAT Global 62.173.122.214(22088) Local Makassar(17733)
    PAT Global 62.173.122.214(47355) Local Makassar(17730)
    PAT Global 62.173.122.214(22128) Local Makassar(17723)
    PAT Global 62.173.122.214(55978) Local Makassar(17718)
    PAT Global 62.173.122.214(44848) Local Makassar(17716)
    PAT Global 62.173.122.214(38940) Local Makassar(17715)
    PAT Global 62.173.122.214(64181) Local Makassar(17713)
    PAT Global 62.173.122.214(28397) Local Makassar(17707)
    PAT Global 62.173.122.214(14548) Local Makassar(17694)
    PAT Global 62.173.122.214(23745) Local Makassar(17693)
    PAT Global 62.173.122.214(10084) Local Makassar(17692)
    PAT Global 62.173.122.214(61644) Local Makassar(17691)
    PAT Global 62.173.122.214(51392) Local Makassar(17679)
    PAT Global 62.173.122.214(20790) Local Makassar(17673)
    PAT Global 62.173.122.214(56698) Local Makassar(17671)
    PAT Global 62.173.122.214(27984) Local Makassar(17670)
    PAT Global 62.173.122.214(42965) Local Makassar(17665)
    PAT Global 62.173.122.214(32248) Local Makassar(17660)
    PAT Global 62.173.122.214(57903) Local Makassar(17645)
    PAT Global 62.173.122.214(59036) Local Makassar(17582)
    PAT Global 62.173.122.214(33687) Local Makassar(17581)
    PAT Global 62.173.122.214(31657) Local Makassar(17570)
    PAT Global 62.173.122.214(46920) Local Makassar(17564)
    PAT Global 62.173.122.214(36562) Local Makassar(17543)
    PAT Global 62.173.122.214(40306) Local Makassar(17540)
    PAT Global 62.173.122.214(46942) Local Makassar(17534)
    PAT Global 62.173.122.214(37464) Local Makassar(17533)
    PAT Global 62.173.122.214(42727) Local Makassar(17524)
    PAT Global 62.173.122.214(6022) Local Makassar(17520)
    PAT Global 62.173.122.214(39495) Local Makassar(17519)
    PAT Global 62.173.122.214(54956) Local Makassar(17517)
    PAT Global 62.173.122.214(40428) Local Makassar(17515)
    PAT Global 62.173.122.214(30491) Local Makassar(17513)
    PAT Global 62.173.122.214(49410) Local Makassar(17510)
    PAT Global 62.173.122.214(11393) Local Makassar(17508)
    PAT Global 62.173.122.214(10855) Local Makassar(17501)
    PAT Global 62.173.122.214(28612) Local Makassar(17500)
    PAT Global 62.173.122.214(9958) Local Makassar(17498)
    PAT Global 62.173.122.214(59305) Local Makassar(17497)
    PAT Global 62.173.122.214(62833) Local Makassar(17492)
    PAT Global 62.173.122.214(23829) Local Makassar(17485)
    PAT Global 62.173.122.214(13113) Local Makassar(17468)
    PAT Global 62.173.122.214(12505) Local Makassar(17467)
    PAT Global 62.173.122.214(49027) Local Makassar(17453)
    PAT Global 62.173.122.214(56889) Local Makassar(17436)
    PAT Global 62.173.122.214(36547) Local Makassar(17387)
    PAT Global 62.173.122.214(19577) Local Makassar(17376)
    PAT Global 62.173.122.214(1465) Local Makassar(17370)
    PAT Global 62.173.122.214(22256) Local Makassar(17357)
    PAT Global 62.173.122.214(61945) Local Makassar(17348)
    PAT Global 62.173.122.214(28832) Local Makassar(17347)
    PAT Global 62.173.122.214(33492) Local Makassar(17346)
    PAT Global 62.173.122.214(32969) Local Makassar(17345)
    PAT Global 62.173.122.214(43156) Local Makassar(17339)
    PAT Global 62.173.122.214(47582) Local Makassar(17263)
    PAT Global 62.173.122.214(12531) Local Makassar(17255)
    PAT Global 62.173.122.214(24337) Local Makassar(17252)
    PAT Global 62.173.122.214(57673) Local Makassar(17250)
    PAT Global 62.173.122.214(44784) Local Makassar(17248)
    PAT Global 62.173.122.214(27903) Local Makassar(17246)
    PAT Global 62.173.122.214(29465) Local Makassar(17242)
    PAT Global 62.173.122.214(39233) Local Makassar(17194)
    PAT Global 62.173.122.214(13916) Local Makassar(17191)
    PAT Global 62.173.122.214(4166) Local Makassar(17168)
    PAT Global 62.173.122.214(61802) Local Makassar(17148)
    PAT Global 62.173.122.214(63143) Local Makassar(17147)
    PAT Global 62.173.122.214(18807) Local Makassar(17146)
    PAT Global 62.173.122.214(7940) Local Makassar(17142)
    PAT Global 62.173.122.214(25729) Local Makassar(17140)
    PAT Global 62.173.122.214(7743) Local Makassar(17074)
    PAT Global 62.173.122.214(16393) Local Makassar(16982)
    PAT Global 62.173.122.214(36809) Local Makassar(16972)
    PAT Global 62.173.122.214(59711) Local Makassar(16837)
    PAT Global 62.173.122.214(22294) Local Makassar(16764)
    PAT Global 62.173.122.214(49406) Local Makassar(16553)
    PAT Global 62.173.122.214(45168) Local Makassar(16550)
    PAT Global 62.173.122.214(38834) Local Makassar(16548)
    PAT Global 62.173.122.214(47626) Local Makassar(15438)
    PAT Global 62.173.122.214(29832) Local Makassar(15416)
    PAT Global 62.173.122.214(39215) Local Makassar(14293)
    PAT Global 62.173.122.214(45583) Local Makassar(7299)

Conn:
    TCP outside 212.58.244.58:80 inside Makassar:17955, idle 0:00:04, bytes 20649, flags UIO
    TCP outside 212.58.227.138:80 inside Makassar:17954, idle 0:00:00, bytes 1346, flags UFRIO
    TCP outside 212.58.244.58:80 inside Makassar:17951, idle 0:00:04, bytes 201480, flags UIO
    TCP outside 212.58.246.108:80 inside Makassar:17950, idle 0:00:05, bytes 53109, flags UIO
    TCP outside 2.18.210.64:443 inside Makassar:17944, idle 0:00:24, bytes 4578, flags UIO
    TCP outside 2.18.210.64:443 inside Makassar:17943, idle 0:00:24, bytes 22212, flags UIO
    TCP outside 2.18.210.64:443 inside Makassar:17942, idle 0:00:24, bytes 13530, flags UIO
    TCP outside 2.18.210.64:443 inside Makassar:17941, idle 0:00:24, bytes 19172, flags UIO
    TCP outside 2.18.210.64:443 inside Makassar:17940, idle 0:00:24, bytes 8548, flags UIO
    TCP outside 134.60.112.153:80 inside Makassar:17936, idle 0:00:10, bytes 5992, flags UFRIO
    TCP outside 93.184.220.23:80 inside Makassar:17910, idle 0:00:29, bytes 1526, flags UFRIO
    TCP outside 209.85.229.102:80 inside Makassar:17909, idle 0:00:35, bytes 4260, flags UIO
    TCP outside 93.184.220.23:80 inside Makassar:17908, idle 0:00:29, bytes 2398, flags UFRIO
    TCP outside 64.4.52.169:80 inside Makassar:17907, idle 0:00:35, bytes 910, flags UIO
    TCP outside 209.85.229.104:80 inside Makassar:17906, idle 0:00:16, bytes 155339, flags UIO
    TCP outside 209.85.229.100:80 inside Makassar:17905, idle 0:00:36, bytes 25920, flags UIO
    TCP outside 209.85.229.99:80 inside Makassar:17898, idle 0:00:34, bytes 8193, flags UIO
    TCP outside 93.184.220.23:80 inside Makassar:17894, idle 0:00:32, bytes 4622, flags UFRIO
    TCP outside 213.199.148.149:80 inside Makassar:17890, idle 0:00:36, bytes 424, flags UFRIO
    TCP outside 88.221.176.170:80 inside Makassar:17873, idle 0:00:48, bytes 1616, flags UIO
    TCP outside 93.184.220.23:80 inside Makassar:17861, idle 0:00:45, bytes 3951, flags UFRIO
    TCP outside 93.184.220.23:80 inside Makassar:17858, idle 0:00:47, bytes 2633, flags UFRIO
    TCP outside 93.184.220.23:80 inside Makassar:17857, idle 0:00:47, bytes 1308, flags UFRIO
    TCP outside 93.184.220.23:80 inside Makassar:17856, idle 0:00:48, bytes 2690, flags UFRIO
    TCP outside 209.85.143.99:80 inside Makassar:17831, idle 0:00:16, bytes 3906, flags UIO
    TCP outside 93.184.220.23:80 inside Makassar:17830, idle 0:01:02, bytes 3201, flags UFRIO
    TCP outside 92.122.127.9:80 inside Makassar:17824, idle 0:01:13, bytes 2028, flags UIO
    TCP outside 92.122.217.185:80 inside Makassar:17823, idle 0:01:15, bytes 7355, flags UIO
    TCP outside 92.122.217.144:80 inside Makassar:17822, idle 0:01:16, bytes 2603, flags UIO
    TCP outside 92.122.217.144:80 inside Makassar:17821, idle 0:01:16, bytes 2553, flags UIO
    TCP outside 165.193.122.28:80 inside Makassar:17820, idle 0:01:11, bytes 7458, flags UFRIO
    TCP outside 92.122.127.243:80 inside Makassar:17819, idle 0:01:19, bytes 6520, flags UIO
    TCP outside 213.171.193.104:80 inside Makassar:17814, idle 0:01:35, bytes 1840293, flags UIO
    TCP outside 209.85.229.164:80 inside Makassar:17807, idle 0:01:45, bytes 15973, flags UIO
    TCP outside 69.163.149.38:80 inside Makassar:17801, idle 0:01:42, bytes 53650, flags UFRIO
    TCP outside 92.122.126.248:80 inside Makassar:17800, idle 0:00:31, bytes 3359, flags UFRIO
    TCP outside 209.85.229.102:80 inside Makassar:17786, idle 0:01:50, bytes 3484, flags UIO
    TCP outside 209.85.229.102:80 inside Makassar:17785, idle 0:01:50, bytes 3704, flags UIO
    TCP outside 209.85.227.138:80 inside Makassar:17742, idle 0:00:16, bytes 10670, flags UIO
    TCP outside 213.199.149.49:80 inside Makassar:17733, idle 0:02:18, bytes 31495, flags UFRIO
    TCP outside 209.85.143.142:80 inside Makassar:17730, idle 0:02:20, bytes 10437, flags UIO
    TCP outside 93.184.220.23:80 inside Makassar:17723, idle 0:02:19, bytes 3191, flags UFRIO
    TCP outside 69.63.190.10:80 inside Makassar:17718, idle 0:02:31, bytes 7217, flags UIO
    TCP outside 46.51.188.83:80 inside Makassar:17716, idle 0:02:31, bytes 788, flags UFRIO
    TCP outside 82.112.113.52:80 inside Makassar:17715, idle 0:02:32, bytes 1039, flags UIO
    TCP outside 209.85.143.101:80 inside Makassar:17713, idle 0:02:33, bytes 1394, flags UIO
    TCP outside 2.18.127.139:80 inside Makassar:17707, idle 0:02:38, bytes 30217, flags UIO
    TCP outside 93.184.220.23:80 inside Makassar:17694, idle 0:02:38, bytes 5601, flags UFRIO
    TCP outside 93.184.220.23:80 inside Makassar:17693, idle 0:02:38, bytes 2126, flags UFRIO
    TCP outside 93.184.220.23:80 inside Makassar:17692, idle 0:02:39, bytes 2731, flags UFRIO
    TCP outside 93.184.220.23:80 inside Makassar:17691, idle 0:02:39, bytes 6327, flags UFRIO
    TCP outside 65.55.57.251:80 inside Makassar:17679, idle 0:03:02, bytes 2831, flags UIO
    TCP outside 193.62.203.105:80 inside Makassar:17673, idle 0:03:02, bytes 14037, flags UFRIO
    TCP outside 193.62.203.106:80 inside Makassar:17671, idle 0:03:02, bytes 75206, flags UFRIO
    TCP outside 209.85.229.91:80 inside Makassar:17670, idle 0:02:43, bytes 3592, flags UIO
    TCP outside 209.85.229.95:80 inside Makassar:17665, idle 0:03:17, bytes 20514, flags UIO
    TCP outside 131.111.3.47:80 inside Makassar:17660, idle 0:03:05, bytes 7075, flags UFRIO
    TCP outside 80.239.224.48:80 inside Makassar:17645, idle 0:02:51, bytes 32211, flags UFRIO
    TCP outside 212.24.93.101:80 inside Makassar:17582, idle 0:03:20, bytes 2007, flags UFRIO
    TCP outside 212.24.93.101:80 inside Makassar:17581, idle 0:03:20, bytes 986, flags UFRIO
    TCP outside 64.152.208.66:80 inside Makassar:17570, idle 0:03:32, bytes 934, flags UIO
    TCP outside 64.152.208.66:80 inside Makassar:17564, idle 0:03:32, bytes 1851, flags UIO
    TCP outside 209.85.229.102:80 inside Makassar:17543, idle 0:03:57, bytes 738, flags UIO
    TCP outside 213.199.148.175:80 inside Makassar:17540, idle 0:04:07, bytes 656, flags UFRIO
    TCP outside 213.199.148.166:80 inside Makassar:17534, idle 0:04:06, bytes 30376, flags UFRIO
    TCP outside 213.199.148.166:80 inside Makassar:17533, idle 0:04:06, bytes 9904, flags UFRIO
    TCP outside 209.85.229.132:80 inside Makassar:17524, idle 0:00:15, bytes 8877, flags UFRIO
    TCP outside 209.85.229.132:80 inside Makassar:17520, idle 0:00:16, bytes 9062, flags UFRIO
    TCP outside 209.85.229.132:80 inside Makassar:17519, idle 0:00:16, bytes 5530, flags UFRIO
    TCP outside 92.122.126.218:80 inside Makassar:17517, idle 0:04:18, bytes 3649, flags UIO
    TCP outside 207.46.124.193:80 inside Makassar:17515, idle 0:00:15, bytes 18763, flags UIO
    TCP outside 94.245.117.45:80 inside Makassar:17513, idle 0:04:17, bytes 3500, flags UIO
    TCP outside 94.245.117.45:80 inside Makassar:17510, idle 0:04:22, bytes 4126, flags UIO
    TCP outside 2.18.117.186:80 inside Makassar:17508, idle 0:04:22, bytes 8980, flags UIO
    TCP outside 92.122.127.11:80 inside Makassar:17501, idle 0:04:22, bytes 4428, flags UIO
    TCP outside 65.55.206.9:80 inside Makassar:17500, idle 0:01:15, bytes 2768, flags UFRIO
    TCP outside 192.221.115.254:80 inside Makassar:17498, idle 0:04:14, bytes 7182, flags UFRIO
    TCP outside 213.199.148.171:80 inside Makassar:17497, idle 0:04:20, bytes 2481, flags UFRIO
    TCP outside 92.122.126.218:80 inside Makassar:17492, idle 0:04:23, bytes 12587, flags UIO
    TCP outside 92.122.127.11:80 inside Makassar:17485, idle 0:04:13, bytes 76674, flags UIO
    TCP outside 76.13.18.79:80 inside Makassar:17468, idle 0:04:19, bytes 23243, flags UFRIO
    TCP outside 76.13.18.79:80 inside Makassar:17467, idle 0:04:19, bytes 26559, flags UFRIO
    TCP outside 92.122.208.170:80 inside Makassar:17453, idle 0:03:21, bytes 12974, flags UIO
    TCP outside 92.122.127.8:80 inside Makassar:17436, idle 0:05:07, bytes 16359, flags UIO
    TCP outside 90.223.232.91:80 inside Makassar:17387, idle 0:01:40, bytes 626, flags UFRIO
    TCP outside 92.122.126.235:80 inside Makassar:17376, idle 0:03:25, bytes 355303, flags UIO
    TCP outside 178.79.195.246:80 inside Makassar:17370, idle 0:05:42, bytes 599, flags UFRIO
    TCP outside 194.72.108.2:80 inside Makassar:17357, idle 0:00:21, bytes 13580, flags UFRIO
    TCP outside 82.197.67.21:80 inside Makassar:17348, idle 0:05:39, bytes 23611, flags UFRIO
    TCP outside 82.197.67.21:80 inside Makassar:17347, idle 0:05:39, bytes 21298, flags UFRIO
    TCP outside 82.197.67.21:80 inside Makassar:17346, idle 0:05:39, bytes 19770, flags UFRIO
    TCP outside 82.197.67.21:80 inside Makassar:17345, idle 0:05:39, bytes 32855, flags UFRIO
    TCP outside 82.197.67.21:80 inside Makassar:17339, idle 0:05:40, bytes 1319, flags UFRIO
    TCP outside 90.223.232.93:80 inside Makassar:17263, idle 0:02:02, bytes 9572, flags UFRIO
    TCP outside 92.122.126.203:80 inside Makassar:17255, idle 0:05:44, bytes 148268, flags UIO
    TCP outside 194.6.248.10:80 inside Makassar:17252, idle 0:02:04, bytes 102911, flags UFRIO
    TCP outside 92.122.127.34:80 inside Makassar:17250, idle 0:06:06, bytes 2216, flags UIO
    TCP outside 194.6.248.10:80 inside Makassar:17248, idle 0:02:04, bytes 86072, flags UFRIO
    TCP outside 209.85.143.99:80 inside Makassar:17246, idle 0:02:07, bytes 2626, flags UFRIO
    TCP outside 87.248.210.254:80 inside Makassar:17242, idle 0:06:04, bytes 23947, flags UFRIO
    TCP outside 209.85.229.148:80 inside Makassar:17194, idle 0:03:31, bytes 5474, flags UIO
    TCP outside 92.122.208.169:80 inside Makassar:17191, idle 0:06:20, bytes 8694, flags UIO
    TCP outside 209.85.229.149:80 inside Makassar:17168, idle 0:02:22, bytes 121150, flags UIO
    TCP outside 92.122.127.10:80 inside Makassar:17148, idle 0:01:58, bytes 94428, flags UIO
    TCP outside 92.122.126.232:80 inside Makassar:17147, idle 0:01:58, bytes 44390, flags UIO
    TCP outside 209.85.143.154:80 inside Makassar:17146, idle 0:01:15, bytes 39162, flags UIO
    TCP outside 92.122.126.242:80 inside Makassar:17142, idle 0:05:08, bytes 110320, flags UIO
    TCP outside 80.239.224.26:80 inside Makassar:17140, idle 0:05:29, bytes 30302, flags UFRIO
    TCP outside 209.85.143.96:80 inside Makassar:17074, idle 0:03:30, bytes 4610, flags UIO
    TCP outside 92.122.126.208:80 inside Makassar:16982, idle 0:06:25, bytes 9366, flags UIO
    TCP outside 209.85.143.155:80 inside Makassar:16972, idle 0:01:44, bytes 19326, flags UIO
    TCP outside 92.122.127.17:80 inside Makassar:16837, idle 0:02:56, bytes 27958, flags UIO
    TCP outside 209.85.229.101:80 inside Makassar:16764, idle 0:01:15, bytes 51943, flags UIO
    TCP outside 92.122.208.195:80 inside Makassar:16553, idle 0:02:32, bytes 7406, flags UIO
    TCP outside 92.122.208.178:80 inside Makassar:16550, idle 0:02:32, bytes 30468, flags UIO
    TCP outside 213.155.154.89:80 inside Makassar:16548, idle 0:02:32, bytes 9204, flags UIO
    TCP outside 209.85.143.149:80 inside Makassar:15438, idle 0:03:26, bytes 135209, flags UIO
    TCP outside 209.85.143.148:80 inside Makassar:15416, idle 0:01:09, bytes 58526, flags UFRIO
    TCP outside 92.122.208.146:80 inside Makassar:14293, idle 0:01:16, bytes 63312, flags UIO
    TCP outside 92.122.208.154:80 inside Makassar:7299, idle 0:02:09, bytes 101993, flags UIO

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Wed, 19 Jan 2011 17:02:07 GMT

As you can see there is still no reference to 68.142.x.x (yet I can see it in the logging).

Both Mataura (my PC) and Makassar (ISA) are in the full access group to the Internet

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Mon, 24 Jan 2011 09:14:43 GMT

Anys ideas then?

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Tue, 25 Jan 2011 10:39:01 GMT

Ok, I did another Packet Capture, for the ingress I selected 'Inside' and set the Source to the ISA Server IP and Host to the Destination IP of 68.142.214.24

For the Egress I selected 'Outside', the Source as 68.142.214.24 and the Destination as the ISA Server IP and received this for the 'Get Capture' but it only populated the Ingress

518 packets captured

1: 10:31:05.756918 10.0.0.27.7517 > 68.142.214.24.80: S 391741528:391741528(0) win 65535

2: 10:31:05.903243 68.142.214.24.80 > 10.0.0.27.7517: S 3661029724:3661029724(0) ack 391741529 win 5840

3: 10:31:05.903838 10.0.0.27.7517 > 68.142.214.24.80: . ack 3661029725 win 65535

4: 10:31:05.903929 10.0.0.27.7517 > 68.142.214.24.80: P 391741529:391742248(719) ack 3661029725 win 65535

5: 10:31:06.041288 68.142.214.24.80 > 10.0.0.27.7517: . ack 391742248 win 7190

6: 10:31:06.068111 68.142.214.24.80 > 10.0.0.27.7517: P 3661029725:3661030271(546) ack 391742248 win 7190

7: 10:31:06.068142 68.142.214.24.80 > 10.0.0.27.7517: F 3661030271:3661030271(0) ack 391742248 win 7190

8: 10:31:06.068752 10.0.0.27.7517 > 68.142.214.24.80: . ack 3661030272 win 64989

9: 10:31:06.068798 10.0.0.27.7517 > 68.142.214.24.80: R 391742248:391742248(0) ack 3661030272 win 0

10: 10:31:07.069957 10.0.0.27.7518 > 68.142.214.24.80: S 4189409753:4189409753(0) win 65535

11: 10:31:07.195760 68.142.214.24.80 > 10.0.0.27.7518: S 1489261078:1489261078(0) ack 4189409754 win 5840

12: 10:31:07.196202 10.0.0.27.7518 > 68.142.214.24.80: . ack 1489261079 win 65535

13: 10:31:07.196278 10.0.0.27.7518 > 68.142.214.24.80: P 4189409754:4189410473(719) ack 1489261079 win 65535

14: 10:31:07.323072 68.142.214.24.80 > 10.0.0.27.7518: . ack 4189410473 win 7190

15: 10:31:07.363506 68.142.214.24.80 > 10.0.0.27.7518: P 1489261079:1489261624(545) ack 4189410473 win 7190

16: 10:31:07.363552 68.142.214.24.80 > 10.0.0.27.7518: F 1489261624:1489261624(0) ack 4189410473 win 7190

17: 10:31:07.364132 10.0.0.27.7518 > 68.142.214.24.80: . ack 1489261625 win 64990

18: 10:31:07.364193 10.0.0.27.7518 > 68.142.214.24.80: R 4189410473:4189410473(0) ack 1489261625 win 0

19: 10:31:08.363048 10.0.0.27.7519 > 68.142.214.24.80: S 256218219:256218219(0) win 65535

20: 10:31:08.509815 68.142.214.24.80 > 10.0.0.27.7519: S 2460791939:2460791939(0) ack 256218220 win 5840

21: 10:31:08.510242 10.0.0.27.7519 > 68.142.214.24.80: . ack 2460791940 win 65535

22: 10:31:08.510319 10.0.0.27.7519 > 68.142.214.24.80: P 256218220:256218939(719) ack 2460791940 win 65535

23: 10:31:08.658245 68.142.214.24.80 > 10.0.0.27.7519: . ack 256218939 win 7190

24: 10:31:08.686350 68.142.214.24.80 > 10.0.0.27.7519: P 2460791940:2460792510(570) ack 256218939 win 7190

25: 10:31:08.686396 68.142.214.24.80 > 10.0.0.27.7519: F 2460792510:2460792510(0) ack 256218939 win 7190

26: 10:31:08.686960 10.0.0.27.7519 > 68.142.214.24.80: . ack 2460792511 win 64965

27: 10:31:08.687037 10.0.0.27.7519 > 68.142.214.24.80: R 256218939:256218939(0) ack 2460792511 win 0

28: 10:31:09.691233 10.0.0.27.7522 > 68.142.214.24.80: S 2539672277:2539672277(0) win 65535

29: 10:31:09.827517 68.142.214.24.80 > 10.0.0.27.7522: S 2839919120:2839919120(0) ack 2539672278 win 5840

30: 10:31:09.827944 10.0.0.27.7522 > 68.142.214.24.80: . ack 2839919121 win 65535

31: 10:31:09.828021 10.0.0.27.7522 > 68.142.214.24.80: P 2539672278:2539672997(719) ack 2839919121 win 65535

32: 10:31:09.965404 68.142.214.24.80 > 10.0.0.27.7522: . ack 2539672997 win 7190

33: 10:31:10.001998 68.142.214.24.80 > 10.0.0.27.7522: P 2839919121:2839919667(546) ack 2539672997 win 7190

34: 10:31:10.002029 68.142.214.24.80 > 10.0.0.27.7522: F 2839919667:2839919667(0) ack 2539672997 win 7190

35: 10:31:10.002609 10.0.0.27.7522 > 68.142.214.24.80: . ack 2839919668 win 64989

36: 10:31:10.002670 10.0.0.27.7522 > 68.142.214.24.80: R 2539672997:2539672997(0) ack 2839919668 win 0

37: 10:31:10.999109 10.0.0.27.7523 > 68.142.214.24.80: S 1308149304:1308149304(0) win 65535

38: 10:31:11.125115 68.142.214.24.80 > 10.0.0.27.7523: S 557634201:557634201(0) ack 1308149305 win 5840

39: 10:31:11.125542 10.0.0.27.7523 > 68.142.214.24.80: . ack 557634202 win 65535

40: 10:31:11.125619 10.0.0.27.7523 > 68.142.214.24.80: P 1308149305:1308150024(719) ack 557634202 win 65535

41: 10:31:11.252718 68.142.214.24.80 > 10.0.0.27.7523: . ack 1308150024 win 7190

42: 10:31:11.281891 68.142.214.24.80 > 10.0.0.27.7523: P 557634202:557634772(570) ack 1308150024 win 7190

43: 10:31:11.281922 68.142.214.24.80 > 10.0.0.27.7523: F 557634772:557634772(0) ack 1308150024 win 7190

44: 10:31:11.282547 10.0.0.27.7523 > 68.142.214.24.80: . ack 557634773 win 64965

45: 10:31:11.282608 10.0.0.27.7523 > 68.142.214.24.80: R 1308150024:1308150024(0) ack 557634773 win 0

46: 10:31:12.278702 10.0.0.27.7524 > 68.142.214.24.80: S 1254110367:1254110367(0) win 65535

47: 10:31:12.425164 68.142.214.24.80 > 10.0.0.27.7524: S 2415734454:2415734454(0) ack 1254110368 win 5840

48: 10:31:12.425652 10.0.0.27.7524 > 68.142.214.24.80: . ack 2415734455 win 65535

49: 10:31:12.425728 10.0.0.27.7524 > 68.142.214.24.80: P 1254110368:1254111087(719) ack 2415734455 win 65535

50: 10:31:12.574112 68.142.214.24.80 > 10.0.0.27.7524: . ack 1254111087 win 7190

51: 10:31:12.603102 68.142.214.24.80 > 10.0.0.27.7524: P 2415734455:2415735025(570) ack 1254111087 win 7190

52: 10:31:12.603148 68.142.214.24.80 > 10.0.0.27.7524: F 2415735025:2415735025(0) ack 1254111087 win 7190

53: 10:31:12.603713 10.0.0.27.7524 > 68.142.214.24.80: . ack 2415735026 win 64965

54: 10:31:12.603774 10.0.0.27.7524 > 68.142.214.24.80: R 1254111087:1254111087(0) ack 2415735026 win 0

55: 10:31:13.615980 10.0.0.27.7525 > 68.142.214.24.80: S 221106100:221106100(0) win 65535

56: 10:31:13.745719 68.142.214.24.80 > 10.0.0.27.7525: S 945200089:945200089(0) ack 221106101 win 5840

57: 10:31:13.746146 10.0.0.27.7525 > 68.142.214.24.80: . ack 945200090 win 65535

58: 10:31:13.746223 10.0.0.27.7525 > 68.142.214.24.80: P 221106101:221106820(719) ack 945200090 win 65535

59: 10:31:13.877884 68.142.214.24.80 > 10.0.0.27.7525: . ack 221106820 win 7190

60: 10:31:13.913481 68.142.214.24.80 > 10.0.0.27.7525: P 945200090:945200635(545) ack 221106820 win 7190

I'd really like to get this resolved so would appreciate further assistance please.

Re: Flickr uploading tool via ISA2000

Javier Zamora — Mon, 31 Jan 2011 13:23:39 GMT

Try with this capture and see if you are able to get any outputs:

access-list capin permit ip any host 68.142.214.24
access-list capin permit ip host 68.142.214.24 any
capture capin access-list capin pack 1520 interface inside
access-list capout permit ip any host 68.142.214.24
access-list capout permit ip host 68.142.214.24 any
capture capout access-list capout pack 1520 interface outside

capture capasp asp type all

If you see ooutput on the inside and the outside get also the ASP drop one so we can take a look.

Re: Flickr uploading tool via ISA2000

mark.a.coleman — Tue, 01 Feb 2011 15:11:04 GMT

Sorry, I don't understand. Are they commands I need to type in the command line interface?

What do you mean by 'get also the ASP drop one'

Also I'm still not convinced by the port number increase when the packets come from the ISA Server since I do not see this behaviour when it is bypassed

Thanks