Re: Antispoofing

  • From: "cismic" <cismic@xxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 3 Dec 2001 15:31:26 -0800

Well actually I use the antispoof switch every night.  You see when I'm
not available to keep an eye 
On my machines I just turn off the power and hang crystals over my hubs.
Not really...
Joseph

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: Monday, December 03, 2001 3:24 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Antispoofing


http://www.ISAserver.org


That's quite an unusual request to make of ISA.  If there is a way to
disable spoof alerts, I don't know what it is..  Anyone?

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/
----- Original Message -----
From: "William Holmes" <wtholmes@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, December 03, 2001 12:04
Subject: [isalist] Re: Antispoofing


http://www.ISAserver.org


Hi,

I actually wish to use my ISA server exclusivly to publish multiple
servers from one logical server. Eventually I wish to use WebCaching
with its comensorate benefits. However right now I just want everyone to
be able to access this server through the same address without the need
of playing with DNS or Changing router confiurations.

As far as me wanting to know when someone is trying to spoof address I
agree with you except I already have Antispoofing confiugred through my
Firewall. As I said or at least inferred in my mail I expect to see
internal address accessing hosts in my DMZ. I simply wish to have the
ISA server ignore this apparant spoof so that users inside can go to the
www type address and get an answer.

I don't want the ISA server to route the client web traffic. I want the
ISA server to publish multiple web servers as one Virtual Host to both
inside and outside clients without the need of reconfiguring any client
software.

Thanks

Bill

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Monday, December 03, 2001 2:38 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Antispoofing


http://www.ISAserver.org


Antispoofing deals with receiving a packet with a source IP that doesn't
belong in that network.  Trust me; you want to know when that occurs. If
you're routing internal traffic around ISA to the external interface,
then ISA will balk at that traffic (as it should).

You want the clients so use ISA to route their web traffic, but you
don't want to configure them to talk to it?

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/
----- Original Message -----
From: "William Holmes" <wtholmes@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, December 03, 2001 11:22
Subject: [isalist] Antispoofing


http://www.ISAserver.org


Hello,

Is it possible to configure Antispoofing ?  I would like to disable
Antispoofing. I essentially want my ISA server to act as though its my
Web server. I have published the "Real" web server with the ISA server
and that works fine. The only problem is that users on the inside
network are unable to connect to the ISA servers external network due to
the Antispoofing rule.

I have the ISA servers external network in a DMZ network and do expect
traffic from my internal nets.

Notes: I can connect successfully to the Internal Interface and see my
published web servers.  I would like to enable this capability for my
internal users without having to configure proxies or having them point
to the internal address of the ISA server.


Thanks

Bill

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wtholmes@xxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')



Other related posts: