LogfilesThis is one of two things: 1. IE on the ISA using "localhost:8080" in the proxy settings 2. a secureNAT or Firewall client making its way through the HTTP redirector To see if it's #2, tell the HTTP redirector to refuse secureNAT and Firewall client web requests. If the log entries stop, you've found it. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/authors/harrison/ Read the book! ----- Original Message ----- From: Vanvelthoven, Danny To: [ISAserver.org Discussion List] Sent: Friday, January 04, 2002 01:40 Subject: [isalist] Logfiles http://www.ISAserver.org Hi All, another thing today. I'm looking at my logfiles. and in the webdyyyymmdd.log, I see following : 127.0.0.1, anonymous, -, N, 1/4/2002, 0:02:15, w3proxy, ISA, -, -, -, 0, 0, 0, 0, -, TCP, -, -, -, -, 400, 0x0, -, - 127.0.0.1, anonymous, -, N, 1/4/2002, 0:03:15, w3proxy, ISA, -, -, -, 0, 0, 0, 0, -, TCP, -, -, -, -, 400, 0x0, -, - 127.0.0.1, anonymous, -, N, 1/4/2002, 0:04:15, w3proxy, ISA, -, -, -, 0, 0, 0, 0, -, TCP, -, -, -, -, 400, 0x0, -, - 127.0.0.1, anonymous, -, N, 1/4/2002, 0:05:15, w3proxy, ISA, -, -, -, 0, 0, 0, 0, -, TCP, -, -, -, -, 400, 0x0, -, - 127.0.0.1, anonymous, -, N, 1/4/2002, 0:06:16, w3proxy, ISA, -, -, -, 0, 0, 0, 0, -, TCP, -, -, -, -, 400, 0x0, -, - 127.0.0.1, anonymous, -, N, 1/4/2002, 0:07:16, w3proxy, ISA, -, -, -, 0, 0, 0, 0, -, TCP, -, -, -, -, 400, 0x0, -, - 127.0.0.1, anonymous, -, N, 1/4/2002, 0:08:16, w3proxy, ISA, -, -, -, 0, 0, 0, 0, -, TCP, -, -, -, -, 400, 0x0, -, - This comes back a LOT of times in my log. What's going on ?? Danny Vanvelthoven ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')