RE: Getting 15105 and 15108

  • From: Jim Harrison <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 04 Jun 2004 06:15:31 -0700

I try...
:-p
  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Fri, 4 Jun 2004 15:21:19 +1000
 "Anthony Michaud" <anthonym@xxxxxxxxxxxxxx> wrote:
http://www.ISAserver.org

Aww you spoil all my fun! :)

Seriously though, for a list, it should be forced ASCII only - html just bloats 
everything, including archives if you're inclined to keep them.  (Although I 
don't *always* revert to ASCII :/)

> -----Original Message-----
> From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> Sent: Friday, 4 June 2004 00:37
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Getting 15105 and 15108
> 
> 
> http://www.ISAserver.org
> 
> Don't
> Render
> HTML
> Formatted
> Email
> 
>  Jim Harrison
>  MCP(NT4, W2K), A+, Network+, PCG
>  http://www.microsoft.com/isaserver
>  http://isaserver.org/Jim_Harrison
>  http://isatools.org
> 
>  Read the help, books and articles!
> ----- Original Message ----- 
> From: "Anthony Michaud" <anthonym@xxxxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Wednesday, June 02, 2004 17:13
> Subject: [isalist] RE: Getting 15105 and 15108
> 
> 
> http://www.ISAserver.org
> 
> IS this a competition FOR the most annoying FONTs???
> 
> -----Original Message-----
> From: mathif@xxxxxxxxxxxxxxx [mailto:mathif@xxxxxxxxxxxxxxx]
> Sent: Saturday, 29 May 2004 23:51
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Getting 15105 and 15108
> 
> 
> http://www.ISAserver.org
> 
> Steve, yes  if someone is scanning from outside, and is 
> spoofing their address...
> 
> Regards,
> Mohammed Athif Khaleel
> Asst.Network Engineer
> AlFaisaliah Group Information Technology
> Tel.: +966-1-461-0077 x.209
> Moble.: +966-509774015
> Email: mathif@xxxxxxxxxxxxxxx
> "Save Internet, Keep all the systems patched"
> Web: http://alfaisaliah.com <http://alfaisaliah.com/>
> 
> -----Original Message-----
> From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx]
> Sent: Saturday, 29 May 2004 4:39 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Getting 15105 and 15108
> 
> 
> http://www.ISAserver.org
> 
> I beg to differ Mohammed, if someone is scanning from 
> outside, and is spoofing their address, then no matter what 
> you add to the lat 
> will not stop these alerts, therefore the only way to fix it 
> is to turn off the  alerts.
> 
> HTH
> Steve
> 
>   _____
> 
> From: mathif@xxxxxxxxxxxxxxx [mailto:mathif@xxxxxxxxxxxxxxx]
> Sent: Saturday, May 29, 2004 9:57 AM
> To: Isa Weblist
> Subject: [isalist] RE: Getting 15105 and 15108
> 
> 
> http://www.ISAserver.org
> 
> Steve thatz never a solution... I had rather check the LAT 
> and see if the ISA is accessed over terminal and that IP entry is not 
> listed in the routing table.
> NO offence intended :-)
> 
> Regards,
> Mohammed Athif Khaleel
> Asst.Network Engineer
> AlFaisaliah Group Information Technology
> Tel.: +966-1-461-0077 x.209
> Moble.: +966-509774015
> Email: mathif@xxxxxxxxxxxxxxx
> "Save Internet, Keep all the systems patched"
> Web: http://alfaisaliah.com <http://alfaisaliah.com/>
> 
> -----Original Message-----
> From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx]
> Sent: Friday, 28 May 2004 11:40 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Getting 15105 and 15108
> 
> 
> http://www.ISAserver.org
> 
> turn off the alerts..
> 
> Steve
> 
>   _____
> 
> From: Hamilton, Calvin [mailto:Calvin.Hamilton@xxxxxxxxxxxxxx]
> Sent: Friday, May 28, 2004 4:25 PM
> To: Isa Weblist
> Subject: [isalist] Getting 15105 and 15108
> 
> 
> http://www.ISAserver.org
> 
> 
> What can I do to prevent or manage these events
> 
> 15105 is ISA Server detected an all port scan attack from 
> Internet Protocol (IP) address 209.217.88.172
> 
> 15108 is ISA Server detected a spoof attack from Internet 
> Protocol (IP) address 65.116.240.1
> 
> 
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: jim@xxxxxxxxxxxx
> To unsubscribe visit 
http://www.webelists.com/cgi/lyris.pl?enter=isalist


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
anthonym@xxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist


Other related posts: