RE: HELP : ISA Packet Filter log fills up - What can I do to eliminat e these entries in the PF log ?

  • From: "Peter J. Persing" <Peter@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 11 Sep 2002 09:11:22 -0600

Do you have netbios enabled on the external network card?? That is a no
no. Make sure that file and printer sharing is disabled on that card,
and that "enable netbios over tcp/ip" is unchecked.

Pete
 

-----Original Message-----
From: FRAEYE MIKE [mailto:Mike.Fraeye@xxxxxx] 
Sent: Wednesday, September 11, 2002 1:52 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] HELP : ISA Packet Filter log fills up - What can I do
to eliminat e these entries in the PF log ?


http://www.ISAserver.org


Hi all,

The following lines keep filling up my PF log. (20 entries a minute):

11/09/2002      8:58:32 172.XXX.YYY.246                 195.XXX.YYY.100
Udp             1433            137             -       BLOCKED
172.21.172.246                  45 00 00 4e 09 bf 00 00 80 11 00 00 ac
15 ac f6 c3 4a c3 64    05 99 00 89 00 3a 4c 19

11/09/2002      8:58:30 172.XXX.YYY.246                 195.XXX.YYY.100
Udp             1433            137             -       BLOCKED
172.21.172.246                  45 00 00 4e 09 bc 00 00 80 11 00 00 ac
15 ac f6 c3 4a c3 64    05 99 00 89 00 3a 4c 1b

...


More Info:
172.XXX.YYY.246           External NIC ISA
195.XXX.YYY.100           FTP site

On a client there's a script running for FTP download via the Firewall
Client.
The FTP passes without a problem. 

Is this behaviour normal or what can I do to eliminate these entries in
my log files. Any help is well appreciated ;-)

Thanks in advance,
Mikey, Belgium


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: