RE: Getting 15105 and 15108

  • From: "Anthony Michaud" <anthonym@xxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 9 Jun 2004 11:56:25 +1000

Hey - Jim volunteered!

> -----Original Message-----
> From: cismic [mailto:cismic@xxxxxxx]
> Sent: Wednesday, 9 June 2004 11:39
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Getting 15105 and 15108
> 
> 
> http://www.ISAserver.org
> 
> Homework!!! What homework, use the study hall dude.
> 
> Joseph
> ----- Original Message ----- 
> From: "Anthony Michaud" <anthonym@xxxxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Tuesday, June 08, 2004 4:51 PM
> Subject: [isalist] RE: Getting 15105 and 15108
> 
> 
> http://www.ISAserver.org
> 
> I was meaning the extra homework that you volunteered for!  :)
> 
> Anthony.
> 
> > -----Original Message-----
> > From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> > Sent: Monday, 7 June 2004 15:16
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Getting 15105 and 15108
> >
> >
> > http://www.ISAserver.org
> >
> > Already took the final (passed).
> > One more quarter to go and I get my certificate...
> > C Programmer (entry level) ;-p
> >
> >   Jim Harrison
> >   MCP(NT4, W2K), A+, Network+, PCG
> >   http://isaserver.org/Jim_Harrison/
> >   http://isatools.org
> >   Read the help / books / articles!
> >
> >
> > On Mon, 7 Jun 2004 11:29:31 +1000
> >  "Anthony Michaud" <anthonym@xxxxxxxxxxxxxx> wrote:
> > http://www.ISAserver.org
> >
> > You're allowed to leave early - just make sure you get your
> > homework in first thing tomorrow morning!
> >
> > :)
> >
> > > -----Original Message-----
> > > From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> > > Sent: Friday, 4 June 2004 23:17
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: Getting 15105 and 15108
> > >
> > >
> > > http://www.ISAserver.org
> > >
> > > Yeh, but you didn't say I could leave my seat...
> > > I still gotta go, teach...
> > > ;-p
> > >   Jim Harrison
> > >   MCP(NT4, W2K), A+, Network+, PCG
> > >   http://isaserver.org/Jim_Harrison/
> > >   http://isatools.org
> > >   Read the help / books / articles!
> > >
> > >
> > > On Fri, 4 Jun 2004 15:21:46 +1000
> > >  "Anthony Michaud" <anthonym@xxxxxxxxxxxxxx> wrote:
> > > http://www.ISAserver.org
> > >
> > > Didn't you just put your hand up? :)
> > >
> > > > -----Original Message-----
> > > > From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> > > > Sent: Friday, 4 June 2004 01:14
> > > > To: [ISAserver.org Discussion List]
> > > > Subject: [isalist] RE: Getting 15105 and 15108
> > > >
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > ..now that would be a kewl feature; "render from trusted
> > > > sources only" and use the actual sending mail server data
> > > > (not the @#%#$^%
> > > > "from" or "reply-to") to define "trusted sources".
> > > > Who wants to own and drive that?
> > > >
> > > >  Jim Harrison
> > > >  MCP(NT4, W2K), A+, Network+, PCG
> > > >  http://www.microsoft.com/isaserver
> > > >  http://isaserver.org/Jim_Harrison
> > > >  http://isatools.org
> > > >
> > > >  Read the help, books and articles!
> > > > ----- Original Message ----- 
> > > > From: "Troy Radtke" <TRadtke@xxxxxxxxxxxx>
> > > > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > > > Sent: Thursday, June 03, 2004 08:00
> > > > Subject: [isalist] RE: Getting 15105 and 15108
> > > >
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > But that takes half the fun out of this list.....
> > > >
> > > > -----Original Message-----
> > > > From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> > > > Sent: Thursday, June 03, 2004 9:37 AM
> > > > To: [ISAserver.org Discussion List]
> > > > Subject: [isalist] RE: Getting 15105 and 15108
> > > >
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > Don't
> > > > Render
> > > > HTML
> > > > Formatted
> > > > Email
> > > >
> > > >  Jim Harrison
> > > >  MCP(NT4, W2K), A+, Network+, PCG
> > > http://www.microsoft.com/isaserver
> > > >  http://isaserver.org/Jim_Harrison
> > > >  http://isatools.org
> > > >
> > > >  Read the help, books and articles!
> > > > ----- Original Message ----- 
> > > > From: "Anthony Michaud" <anthonym@xxxxxxxxxxxxxx>
> > > > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > > > Sent: Wednesday, June 02, 2004 17:13
> > > > Subject: [isalist] RE: Getting 15105 and 15108
> > > >
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > IS this a competition FOR the most annoying FONTs???
> > > >
> > > > -----Original Message-----
> > > > From: mathif@xxxxxxxxxxxxxxx [mailto:mathif@xxxxxxxxxxxxxxx]
> > > > Sent: Saturday, 29 May 2004 23:51
> > > > To: [ISAserver.org Discussion List]
> > > > Subject: [isalist] RE: Getting 15105 and 15108
> > > >
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > Steve, yes  if someone is scanning from outside, and is
> > > spoofing their
> > > > address...
> > > >
> > > > Regards,
> > > > Mohammed Athif Khaleel
> > > > Asst.Network Engineer
> > > > AlFaisaliah Group Information Technology
> > > > Tel.: +966-1-461-0077 x.209
> > > > Moble.: +966-509774015
> > > > Email: mathif@xxxxxxxxxxxxxxx
> > > > "Save Internet, Keep all the systems patched"
> > > > Web: http://alfaisaliah.com <http://alfaisaliah.com/>
> > > >
> > > > -----Original Message-----
> > > > From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx]
> > > > Sent: Saturday, 29 May 2004 4:39 PM
> > > > To: [ISAserver.org Discussion List]
> > > > Subject: [isalist] RE: Getting 15105 and 15108
> > > >
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > I beg to differ Mohammed, if someone is scanning from
> > > outside, and is
> > > > spoofing their address, then no matter what you add to the lat
> > > > will not stop these alerts, therefore the only way to fix it
> > > > is to turn off
> > > > the  alerts.
> > > >
> > > > HTH
> > > > Steve
> > > >
> > > >   _____
> > > >
> > > > From: mathif@xxxxxxxxxxxxxxx [mailto:mathif@xxxxxxxxxxxxxxx]
> > > > Sent: Saturday, May 29, 2004 9:57 AM
> > > > To: Isa Weblist
> > > > Subject: [isalist] RE: Getting 15105 and 15108
> > > >
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > Steve thatz never a solution... I had rather check the LAT
> > > > and see if the
> > > > ISA is accessed over terminal and that IP entry is not
> > > > listed in the routing table.
> > > > NO offence intended :-)
> > > >
> > > > Regards,
> > > > Mohammed Athif Khaleel
> > > > Asst.Network Engineer
> > > > AlFaisaliah Group Information Technology
> > > > Tel.: +966-1-461-0077 x.209
> > > > Moble.: +966-509774015
> > > > Email: mathif@xxxxxxxxxxxxxxx
> > > > "Save Internet, Keep all the systems patched"
> > > > Web: http://alfaisaliah.com <http://alfaisaliah.com/>
> > > >
> > > > -----Original Message-----
> > > > From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx]
> > > > Sent: Friday, 28 May 2004 11:40 PM
> > > > To: [ISAserver.org Discussion List]
> > > > Subject: [isalist] RE: Getting 15105 and 15108
> > > >
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > > turn off the alerts..
> > > >
> > > > Steve
> > > >
> > > >   _____
> > > >
> > > > From: Hamilton, Calvin [mailto:Calvin.Hamilton@xxxxxxxxxxxxxx]
> > > > Sent: Friday, May 28, 2004 4:25 PM
> > > > To: Isa Weblist
> > > > Subject: [isalist] Getting 15105 and 15108
> > > >
> > > >
> > > > http://www.ISAserver.org
> > > >
> > > >
> > > > What can I do to prevent or manage these events
> > > >
> > > > 15105 is ISA Server detected an all port scan attack from
> > > > Internet Protocol
> > > > (IP) address 209.217.88.172
> > > >
> > > > 15108 is ISA Server detected a spoof attack from Internet
> > > > Protocol (IP)
> > > > address 65.116.240.1
> > > >
> > > >
> > > >
> > > >
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Other Internet Software Marketing Sites:
> > > > World of Windows Networking:
> > > http://www.windowsnetworking.com Leading
> > > > Network Software Directory: http://www.serverfiles.com No.1
> > > > Exchange Server
> > > > Resource Site: http://www.msexchange.org Windows Security
> > > > Resource Site:
> > > > http://www.windowsecurity.com/ Network Security Library:
> > > > http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> > > > http://www.ntfaxfaq.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org
> > > Discussion List as:
> > > > jim@xxxxxxxxxxxx To unsubscribe visit
> > > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > >
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Other Internet Software Marketing Sites:
> > > > World of Windows Networking:
> > > http://www.windowsnetworking.com Leading
> > > > Network Software Directory: http://www.serverfiles.com No.1
> > > > Exchange Server
> > > > Resource Site: http://www.msexchange.org Windows Security
> > > > Resource Site:
> > > > http://www.windowsecurity.com/ Network Security Library:
> > > > http://www.secinf.net/ Windows 2000/NT Fax Solutions:
> > > > http://www.ntfaxfaq.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org
> > > Discussion List as:
> > > > tradtke@xxxxxxxxxxxx To unsubscribe visit
> > > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Other Internet Software Marketing Sites:
> > > > World of Windows Networking: http://www.windowsnetworking.com
> > > > Leading Network Software Directory: http://www.serverfiles.com
> > > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > > Network Security Library: http://www.secinf.net/
> > > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org Discussion
> > > > List as: jim@xxxxxxxxxxxx
> > > > To unsubscribe visit
> > > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > >
> > > >
> > > > ------------------------------------------------------
> > > > List Archives: 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > > ISA Server Newsletter:
> > http://www.isaserver.org/pages/newsletter.asp
> > > > ISA Server FAQ:
> > http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > > ------------------------------------------------------
> > > > Other Internet Software Marketing Sites:
> > > > World of Windows Networking: http://www.windowsnetworking.com
> > > > Leading Network Software Directory: http://www.serverfiles.com
> > > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > > Network Security Library: http://www.secinf.net/
> > > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > > ------------------------------------------------------
> > > > You are currently subscribed to this ISAserver.org Discussion
> > > > List as: anthonym@xxxxxxxxxxxxxx
> > > > To unsubscribe visit
> > > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Other Internet Software Marketing Sites:
> > > World of Windows Networking: http://www.windowsnetworking.com
> > > Leading Network Software Directory: http://www.serverfiles.com
> > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > Network Security Library: http://www.secinf.net/
> > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion
> > > List as: jim@xxxxxxxxxxxx
> > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: 
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: 
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Other Internet Software Marketing Sites:
> > > World of Windows Networking: http://www.windowsnetworking.com
> > > Leading Network Software Directory: http://www.serverfiles.com
> > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > Network Security Library: http://www.secinf.net/
> > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion
> > > List as: anthonym@xxxxxxxxxxxxxx
> > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: jim@xxxxxxxxxxxx
> > To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> anthonym@xxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> cismic@xxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: anthonym@xxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> 


Other related posts: