Hi Rafael, Have you tried disabling spoof detection yet? Are these real spoof attacks or is your network configured incorrectly? Thanks! Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: Rafael Rodrigues [mailto:rafael.rodrigues@xxxxxxxxxxxxx] Sent: Friday, September 26, 2003 9:28 AM To: [ISAserver.org Discussion List] Subject: [isalist] Web Proxy crashes and Spoof Atack http://www.ISAserver.org Hi list. I try all sugestions here, but the problem persist. All the time that it's occurs, the applicatin log regists: ISA Server detected a spoof attack from Internet Protocol (IP) address 10.11.0.202. A spoof attack occurs when an IP address that is not reachable via the interface on which the packet was received. If logging for dropped packets is set, you can view details in the packet filter log. My filter log regists: 2003-09-26 14:07:15 10.11.0.202 200.255.70.26 ICMP 3 1 Spoof 200.255.70.26 This spoof atack can be the reason of my webproxy service crash? What it means? Thanks a lot! Rafael Rodrigues. -----Mensagem original----- De: Mario Flores [mailto:mflores@xxxxxxxxxxxxxxxxxx] Enviada em: quarta-feira, 24 de setembro de 2003 15:38 Para: [ISAserver.org Discussion List] Assunto: [isalist] Re: Web Proxy Service stop responding http://www.ISAserver.org Hi Rafael, I also had that problem, I installed all the Updates, Service Packs, etc and then everything is OK Regards Mario F. P.D.: Sorry about my grammar! Rafael Rodrigues escribió: >http://www.ISAserver.org > > > >Hi list! >My client use ISA firewall mode. Was configured as secureNAT. I'm surfing at >web and it's stop responding. I go to ISA Server and restart web proxy service >and all back to work. It's ocurs about 3 times /h. Does n1 knows how i can fix? > >Thanks!!! > >Rafael Rodrigues. > ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')