Have the same problem also ..... What is the correct way to handle this problem ? Kindest regards, Mike -----Original Message----- From: ertan.gokalp@xxxxxxxxxx [mailto:ertan.gokalp@xxxxxxxxxx] Sent: donderdag 8 augustus 2002 15:51 To: [ISAserver.org Discussion List] Subject: [isalist] all port scan attack http://www.ISAserver.org Hi, My ISA server sends me the following message """ISA Server name: aaaaaa ISA Server detected a well-known port scan attack from Internet Protocol (IP) address xxx.xxx.xxx.xxx. A well-known port is any port in the range of 1-2048. For more information about this event, see ISA Server Help.""" xxx.xxx.xxx.xxx ih the external IP of the ISA server.?????? I don't understand why it attacks itself , what is the meanning of this message.Please help me. Ertan ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: mike.fraeye@xxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')