Re: ISA Firewall log file ...
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Thu, 2 May 2002 19:44:16 -0700
Are the numbers following "TCP" the same in your log as they are in his?
Your log will be much more helpful...
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!
----- Original Message -----
From: <danny.awosanya@xxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, May 02, 2002 12:36 PM
Subject: [isalist] Re: ISA Firewall log file ...
http://www.ISAserver.org
> http://www.ISAserver.org
>
>
> I see it too.
> What does the rest of the log entry look like?
>
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/authors/harrison/
> Read the books!
> ----- Original Message -----
> From: <danny.awosanya@xxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Thursday, May 02, 2002 8:26 AM
> Subject: [isalist] ISA Firewall log file ...
>
>
> http://www.ISAserver.org
>
>
> I see BLOCKED next to my external IP address:
>
> BLOCKED 209.x.x.x
> BLOCKED 209.x.x.x
> BLOCKED 209.x.x.x
> .
> .
> .
> .
> .
> .
> .
> .
> All configuration on my ISA server has been carefully checked.
> What have I overlooked.
>
> Thanks.
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to
> $subst('Email.Unsub')
>
>
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> danny.awosanya@xxxxxxx To unsubscribe send a blank email to
> $subst('Email.Unsub')
I am sorry I don't have a copy of the log file with me but I do see one of
the weblist member have familiar log file but the "ALLOWED" entry
is "BLOCKED" in mine. The format looks exactly same.
Please bear with me I cannot access my server from the internet for same
reason I came to this site for help.
ISA Server: proxy.nbme.org
Via:
Here are the relevant snippets from the ISA firewall log file:
5/1/2002, 17:03:27, 65.207.85.80, 216.239.39.101, Tcp, 50823, 8000, -,
ALLOWED, 65.207.85.80, -, -
5/1/2002, 17:03:27, 216.239.39.101, 65.207.85.80, Tcp, 8000, 50823, -,
ALLOWED, 65.207.85.80, -, -
5/1/2002, 17:03:27, 65.207.85.80, 216.239.39.101, Tcp, 50823, 8000, -,
ALLOWED, 65.207.85.80, -, -
5/1/2002, 17:03:27, 216.239.39.101, 65.207.85.80, Tcp, 8000, 50823, -,
ALLOWED, 65.207.85.80, -, -
5/1/2002, 17:03:28, 65.207.85.80, 216.239.39.101, Tcp, 50823, 8000, -,
ALLOWED, 65.207.85.80, -, -
5/1/2002, 17:03:28, 216.239.39.101, 65.207.85.80, Tcp, 8000, 50823, -,
ALLOWED, 65.207.85.80, -, -
5/1/2002, 17:03:28, 65.207.85.80, 216.239.39.101, Tcp, 50828, 8000, -,
ALLOWED, 65.207.85.80, -, -
5/1/2002, 17:03:28, 216.239.39.101, 65.207.85.80, Tcp, 8000, 50828, -,
ALLOWED, 65.207.85.80, -, -
Thanks again for your help.
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
