No, and that's why so many folks have resorted to server publishing their web sites. There was a gentleman on the newsgroup (I believe) who had written a WEB extension for ISA that was to answer that issue, but I haven't heard from him in awhile. The only other option is to have your log analysis tools compare the IIS logs with the ISA WEB...log. This requires that you maintain tight sync between their clocks, though. Jim Harrison MCP(2K), A+, Network+, PCG ----- Original Message ----- From: <Thor@xxxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, August 10, 2001 6:43 AM Subject: [isalist] Re: stop default.ida ?? http://www.ISAserver.org Jim, Is there any way to collect the 'true' client IP at the web server when doing Web Publishing (as opposed to Server Pub)? Thanks! ----- Original Message ----- From: "Jim Harrison" <jim@xxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Friday, August 10, 2001 6:33 AM Subject: [isalist] Re: stop default.ida ?? > http://www.ISAserver.org > > > Yes: > 1. Use only web publishing (I know; everyone can't do this for one reason or > another) > 2. Use only FQDN in the destination sets; no IP's > 3. Create a DS as: dest = "*", path = "/default.ida" > 4. Create a deny S&C rule using the above DS > > Bear in mind that if you have to use server publishing to serve you web > site, 3 & 4 may have no effect. > > Jim Harrison > MCP(2K), A+, Network+, PCG > > ----- Original Message ----- > From: "Lars Dávid" <lars@xxxxxx> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> > Sent: Friday, August 10, 2001 1:29 AM > Subject: [isalist] stop default.ida ?? > > > http://www.ISAserver.org > > > Hello, > > In the IIS logs, I find every day people trying to access "default.ida". > But I don't have any virus on the machine, I have checked > everything/everywhere. It's quite annoying tough. > > Is it possible to stop the "GET / default.ida " in ISA Server?? > > -- > > Yours sincerely, > Lars Dávid > > webdesigner/webprogrammer > DBI e-business solutions AB > http://www.dbi.se > > phone: +46(0)431-446580 > cellular: +46(0)739903089 > fax: +46(0)431-446588 > e-mail: lars@xxxxxx > ICQ: 724091 > > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > jim@xxxxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub') > > > > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: thor@xxxxxxxxxxxxxxx > To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')