RE: FW: ISA Server alert: The IP packet source addr ess is not valid.
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 12 Mar 2003 18:48:01 -0600
Hi Vinay,
The first thing I would do is clean up the LAT. You don't need to
include subnets of network Ids you already have in the LAT.
Then I would confirm that the listeners are configured correctly.
Last, I would check that the Web Routing rules don't have any "unusual"
configs. For example, someone mentioned a problem with Web Publishing
Rules error, and *forgot* to mention that their default Web Routing Rule
pointed to a external Web Proxy :-\
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Vinaykumar G [mailto:G.VINAY@xxxxxxxxx]
Sent: Tuesday, March 11, 2003 11:01 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: FW: ISA Server alert: The IP packet source addr
ess is not valid.
http://www.ISAserver.org
Hi Tom,
There are two interfaces in ISA.
External Adpater and Internal Adapter:
The settings for External adapter are as follows:
External Interface:
Ip: 202.xxx.xxx.xxx
S/M:255.255.255.xxx
Gateway: 202.xxx.xxx.x
DNS Servers: 202.xxx.xxx.xxx
202.XXX.XXX.XXX
For Internal Interface:
IP: 10.3.1.150
S.M: 255.255.0.0
Following are the LAT entries:
10.0.0.0 10.255.255.255
10.3.0.0 10.3.255.255
10.3.1.150 10.3.1.160
10.3.1.152 10.3.1.152
10.3.1.170 10.3.1.170
10.3.1.177 10.3.1.177
10.255.255.255 10.255.255.255
169.254.0.0 169.254.255.255
172.16.0.0 172.31.255.255
192.168.0.0 192.168.255.255
The config on the web listerners is a website is published behind ISA,
Ask
authentication for incoming requests is enabled.
Pls. help me urgently!!!
Regards,
Vinay.
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Monday, March 10, 2003 9:12 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: FW: ISA Server alert: The IP packet source
address is not valid.
http://www.ISAserver.org
Hi Vinay,
1. How many interfaces in that machine?
2. What are the interface settings?
3. What are the entries in the LAT?
4. What's the config on the Web listeners?
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Vinaykumar G [mailto:G.VINAY@xxxxxxxxx]
Sent: Sunday, March 09, 2003 12:27 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] FW: ISA Server alert: The IP packet source address is
not valid.
Importance: High
http://www.ISAserver.org
Hi All,
Any idea how to resolve this issue. As the ISA server is hanging
continously without any response. ISA is in integrated mode.
Pls. advice.
Vinay.
ISA Server name: XXXXXXXXXXX
ISA Server detected a spoof attack from Internet Protocol (IP) address
127.0.0.1. A spoof attack occurs when an IP address that is not
reachable
via the interface on which the packet was received. If logging for
dropped
packets is set, you can view details in the packet filter log.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
g.vinay@xxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
