Hi Sachin, Network Monitor will easily answer that question for you. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: sachin vaish [mailto:sachin.vaish@xxxxxxxxxx] Sent: Thursday, March 13, 2003 10:50 AM To: [ISAserver.org Discussion List] Subject: [isalist] All port scan http://www.ISAserver.org Hi We get a lot of all port scans as reported by the event viewer. But the ip addresses it is detecting is of the gateway and sometimes from one of the ADSL routers. We get an All port scan every 1 minute or so. I am wondering whether someone could be using our server or bandwidth to do certain things like message relying or something without us knowing, thus taking up valuable resources. I know this is a long shot but i dont know why we are getting this all port scan from our ip addresses. Also bandwdith speeds are really slow although we have multiple ADSL links. Can anyone help? ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Exchange Server Resource Site: http://www.msexchange.org/ Windows Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')