RE: All port scan

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 13 Mar 2003 19:29:49 -0600

Hi Sachin,

Network Monitor will easily answer that question for you.

HTH,
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: sachin vaish [mailto:sachin.vaish@xxxxxxxxxx] 
Sent: Thursday, March 13, 2003 10:50 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] All port scan


http://www.ISAserver.org


Hi

We get a lot of all port scans as reported by the event viewer. But the
ip
addresses it is detecting is of the gateway and sometimes from one of
the
ADSL routers. We get an All port scan every 1 minute or so.

I am wondering whether someone could be using our server or bandwidth to
do certain things like message relying or something without us knowing,
thus taking up valuable resources. I know this is a long shot but i dont
know why we are getting this all port scan from our ip addresses.

Also bandwdith speeds are really slow although we have multiple ADSL
links.

Can anyone help?

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: