[isalist] Re: ISA Server dected a land attack - urgent
- From: "Ball, Dan" <DBall@xxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Thu, 1 Mar 2007 10:48:22 -0500
Would this also be an indication of a compromised machine on the local
network? I'm guessing that it depends on what interface it was detected
on.
________________________________
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Thursday, March 01, 2007 9:14 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA Server dected a land attack - urgent
Don't worry, be happy.
The Internet is a wild & crazy place, with oodles and gobs of jerks,
jackasses, 1d10t5 and full-blown @55h0135 who would like nothing better
than to make your life harder if for no other reason than to say they
did it.
The fact that ISA can not only detect and block this sort of attack is a
good deal. What's even better is that ISA (unlike so many LinkChekPix
devices) can also communicate this to you so that you can revel in your
safety.
http://www.microsoft.com/technet/isa/2000/proddocs/isadocs/isa_15103.msp
x?mfr=true
Yes, I know that's an ISA 2000 link, but ISA versions don't change "land
attacks".
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of John T (lists)
Sent: Wednesday, February 28, 2007 10:33 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA Server dected a land attack - urgent
http://www.eventid.net/display.asp?eventid=15103&source=
John T
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Krisna keo
Sent: Wednesday, February 28, 2007 9:57 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] ISA Server dected a land attack - urgent
http://www.ISAserver.org
Dear All,
I got the distubance from Ms ISA 2004 warning in Event View every one
minute. The external NIC is received the dynamic IP address from ISA
throw ADSL line as the default gateway to internet.
--------------------------------
Event Type: Warning
Event Source: Microsoft Firewall
Event Category: None
Event ID: 15103
Date: 3/1/2007
Time: 12:45:18 PM
User: N/A
Computer: FIREWALL
Description:
ISA Server detected a land attack on Internet Protocol (IP) address
255.255.255.255.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
--------------------------------
Your help would be highly appreciated.
Thanks
Krisna
All mail to and from this domain is GFI-scanned.
Other related posts:
