RE: Intrusion Alerts
- From: "Jason Ballard" <jasonb54@xxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 21 Nov 2001 18:08:47 -0500
You can sometimes see these attacks if your internal users are listening to
streaming media (RealPlayer, Windows Media Player).
Why your external DNS Servers appear, not sure. Do you have any published
Web sites that your internal users visit?
Jason
-----Original Message-----
From: Becker1 [mailto:becker1@xxxxxxxxxxxxxxxxx]
Sent: Wednesday, November 21, 2001 1:57 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Intrusion Alerts
http://www.ISAserver.org
ISA is picking up numerous attacks (couple times a day) and some of the IP
addresses listed are my external DNS servers.
Any suggestions as to why?
Currently when a attack happens from an IP address more than once I create
an IP Packet Filter to block all access to/from that IP address.
Is there anything else I should be doing?
Thanks, John
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jasonb54@xxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
