Re: FW: ISA Server alert: The IP packet source address is not valid.

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 10 Mar 2003 05:32:23 -0800

Can you send :
1. your ipconfig/all
2. your LAT entries

ISA only complains about this when there's either:
1. a configuration error
2. a real spoof attack

 Jim Harrison
 MCP(NT4, W2K), A+, Network+, PCG
 http://www.microsoft.com/isaserver
 http://isaserver.org/Jim_Harrison
 http://isatools.org

 Read the help, books and articles!
----- Original Message -----
From: "Vinaykumar G" <G.VINAY@xxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, March 10, 2003 02:28
Subject: [isalist] FW: ISA Server alert: The IP packet source address is not
valid.


http://www.ISAserver.org




Hi All,
        Any idea how to resolve this issue. As the ISA server is hanging
continously without any response. ISA is in integrated mode. There are some
lots of packets flowing from the Internal card of ISA.

Pls. advice.

Vinay.


ISA Server name: XXXXXXXXXXX

ISA Server detected a spoof attack from Internet Protocol (IP) address
127.0.0.1. A spoof attack occurs when an IP address that is not reachable
via the interface on which the packet was received. If logging for dropped
packets is set, you can view details in the packet filter log.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



Other related posts: