RE: Cannot Telnet to ISA Server

  • From: "Tom Rogers" <trogers@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 16 Feb 2006 15:02:01 -0500

I am getting this alert in ISA...

ISA Server name: ISA

ISA Server detected a spoof attack from Internet Protocol (IP) address
192.168.2.200. A spoof attack occurs when an IP address that is not
reachable via the interface on which the packet was received. If logging
for dropped packets is set, you can view details in the packet filter
log.


 

> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
> Sent: Thursday, February 16, 2006 2:54 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Cannot Telnet to ISA Server
> 
> http://www.ISAserver.org
> 
> Someone poisoned your DNS cache. 
> 
> You must be using a Unix based DNS server. 
> 
> 
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://spaces.msn.com/members/drisa/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> 
> 
> -----Original Message-----
> From: Tom Rogers [mailto:trogers@xxxxxxxxxxxxxxxxxx]
> Sent: Thursday, February 16, 2006 1:52 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Cannot Telnet to ISA Server
> 
> http://www.ISAserver.org
> 
> I deleted the cache. Doesn't matter what PC I try from. 
> 
> > -----Original Message-----
> > From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> > Sent: Thursday, February 16, 2006 2:40 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Cannot Telnet to ISA Server
> > 
> > http://www.ISAserver.org
> > 
> > What is the *exact* URL you're using to get there?
> > This could be either DNS cache poisoning or a simple case of 
> > fat-fingers.
> > 
> > -------------------------------------------------------
> >    Jim Harrison
> >    MCP(NT4, W2K), A+, Network+, PCG
> >    http://isaserver.org/Jim_Harrison/
> >    http://isatools.org
> >    Read the help / books / articles!
> > -------------------------------------------------------
> >  
> > 
> > -----Original Message-----
> > From: Tom Rogers [mailto:trogers@xxxxxxxxxxxxxxxxxx]
> > Sent: Thursday, February 16, 2006 11:35
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Cannot Telnet to ISA Server
> > 
> > http://www.ISAserver.org
> > 
> > I'm trying to access Microsoft's website to download this 
> SP-2, but I 
> > keep getting sent to http://www.netidentity.com
> > 
> > Are they down today?
> > 
> > -TRogers
> > 
> > > -----Original Message-----
> > > From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> > > Sent: Thursday, February 16, 2006 2:20 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: Cannot Telnet to ISA Server
> > > 
> > > http://www.ISAserver.org
> > > 
> > > Works fine for me on SP2.
> > > 
> > > Time to get your security ducks in a row and install SP2.
> > > 
> > > Tom
> > > 
> > > 
> > > Thomas W Shinder, M.D.
> > > Site: www.isaserver.org
> > > Blog: http://spaces.msn.com/members/drisa/
> > > Book: http://tinyurl.com/3xqb7
> > > MVP -- ISA Firewalls
> > > 
> > > 
> > > -----Original Message-----
> > > From: Tom Rogers [mailto:trogers@xxxxxxxxxxxxxxxxxx]
> > > Sent: Thursday, February 16, 2006 1:15 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] Cannot Telnet to ISA Server
> > > 
> > > http://www.ISAserver.org
> > > 
> > > Before I installed ISA 2004 SP-1, I was able to use this 
> command to 
> > > use Remote Desktop to the ISA Server...
> > > 
> > > mstsc /console /v:server_name
> > > 
> > > Now I am not allowed. Do I have to setup a Firewall Rule 
> and if so, 
> > > what are the parameters?
> > > 
> > > Thanx,
> > > 
> > > -TRogers
> > > 
> > > 
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org
> > Discussion List as:
> > > tshinder@xxxxxxxxxxxxxxxxxx
> > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > 
> > > 
> > > 
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org
> > Discussion List as: 
> > > trogers@xxxxxxxxxxxxxxxxxx To unsubscribe visit 
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > > 
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org 
> Discussion List as: 
> > jim@xxxxxxxxxxxx To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> > All mail to and from this domain is GFI-scanned.
> > 
> > 
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org 
> Discussion List as: 
> > trogers@xxxxxxxxxxxxxxxxxx To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> > 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: trogers@xxxxxxxxxxxxxxxxxx To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 


Other related posts: