RE: Web Proxy crashes and Spoof Atack

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 27 Sep 2003 14:40:58 -0500

Hi Rafael,

Have you tried disabling spoof detection yet? Are these real spoof attacks or 
is your network configured incorrectly?

Thanks!
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 


-----Original Message-----
From: Rafael Rodrigues [mailto:rafael.rodrigues@xxxxxxxxxxxxx] 
Sent: Friday, September 26, 2003 9:28 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Web Proxy crashes and Spoof Atack

http://www.ISAserver.org


Hi list. I try  all sugestions here, but the problem persist. All the time that 
it's occurs, the applicatin log regists:

ISA Server detected a spoof attack from Internet Protocol (IP) address 
10.11.0.202. A spoof attack occurs when an IP address that is not reachable via 
the interface on which the packet was received. If logging for dropped packets 
is set, you can view details in the packet filter log.

My filter log regists: 
2003-09-26      14:07:15        10.11.0.202     200.255.70.26   ICMP    3       
1       Spoof   200.255.70.26

This spoof atack can be the reason of my webproxy service crash?
What it means?

Thanks a lot!

   Rafael Rodrigues.

-----Mensagem original-----
De: Mario Flores [mailto:mflores@xxxxxxxxxxxxxxxxxx]
Enviada em: quarta-feira, 24 de setembro de 2003 15:38
Para: [ISAserver.org Discussion List]
Assunto: [isalist] Re: Web Proxy Service stop responding


http://www.ISAserver.org


Hi Rafael, I also had that problem, I installed all the Updates, Service 
Packs, etc and then everything is OK

Regards

Mario F.

P.D.: Sorry about my grammar!

Rafael Rodrigues escribió:

>http://www.ISAserver.org
>
>
>
>Hi list!
>My client use ISA firewall mode. Was configured as secureNAT. I'm surfing at 
>web and it's stop responding. I go to ISA Server and restart web proxy service 
>and all back to work. It's ocurs about 3 times /h. Does n1 knows how i can fix?
>
>Thanks!!!
>
>Rafael Rodrigues. 
>

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: