> http://www.ISAserver.org > > > I see it too. > What does the rest of the log entry look like? > > Jim Harrison > MCP(NT4, W2K), A+, Network+, PCG > http://isaserver.org/authors/harrison/ > Read the books! > ----- Original Message ----- > From: <danny.awosanya@xxxxxxx> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> > Sent: Thursday, May 02, 2002 8:26 AM > Subject: [isalist] ISA Firewall log file ... > > > http://www.ISAserver.org > > > I see BLOCKED next to my external IP address: > > BLOCKED 209.x.x.x > BLOCKED 209.x.x.x > BLOCKED 209.x.x.x > . > . > . > . > . > . > . > . > All configuration on my ISA server has been carefully checked. > What have I overlooked. > > Thanks. > > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > jim@xxxxxxxxxxxx > To unsubscribe send a blank email to > $subst('Email.Unsub') > > > > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > danny.awosanya@xxxxxxx To unsubscribe send a blank email to > $subst('Email.Unsub') I am sorry I don't have a copy of the log file with me but I do see one of the weblist member have familiar log file but the "ALLOWED" entry is "BLOCKED" in mine. The format looks exactly same. Please bear with me I cannot access my server from the internet for same reason I came to this site for help. ISA Server: proxy.nbme.org Via: Here are the relevant snippets from the ISA firewall log file: 5/1/2002, 17:03:27, 65.207.85.80, 216.239.39.101, Tcp, 50823, 8000, -, ALLOWED, 65.207.85.80, -, - 5/1/2002, 17:03:27, 216.239.39.101, 65.207.85.80, Tcp, 8000, 50823, -, ALLOWED, 65.207.85.80, -, - 5/1/2002, 17:03:27, 65.207.85.80, 216.239.39.101, Tcp, 50823, 8000, -, ALLOWED, 65.207.85.80, -, - 5/1/2002, 17:03:27, 216.239.39.101, 65.207.85.80, Tcp, 8000, 50823, -, ALLOWED, 65.207.85.80, -, - 5/1/2002, 17:03:28, 65.207.85.80, 216.239.39.101, Tcp, 50823, 8000, -, ALLOWED, 65.207.85.80, -, - 5/1/2002, 17:03:28, 216.239.39.101, 65.207.85.80, Tcp, 8000, 50823, -, ALLOWED, 65.207.85.80, -, - 5/1/2002, 17:03:28, 65.207.85.80, 216.239.39.101, Tcp, 50828, 8000, -, ALLOWED, 65.207.85.80, -, - 5/1/2002, 17:03:28, 216.239.39.101, 65.207.85.80, Tcp, 8000, 50828, -, ALLOWED, 65.207.85.80, -, - Thanks again for your help.