RE: Non-RFC1918 Addresses in the LAT

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 4 Aug 2005 13:28:01 -0700

If ISA receives traffic on the external side from an IP that is defined
in the LAT, you get a spoof alert.

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Danny [mailto:nocmonkey@xxxxxxxxx] 
Sent: Thursday, August 04, 2005 11:12
To: [ISAserver.org Discussion List]
Subject: [isalist] Non-RFC1918 Addresses in the LAT

http://www.ISAserver.org

ISA 2000: if the pre-existing network implementer (a few years ago)
decided it would be cool to use public IP's on the LAN (less than 100
nodes, flat network; nothing complex), how would ISA treat them if
they are in the LAT?

For example:

LAN = 100.100.100.0
LAT = 127.0.0.1, 100.100.100.0
A connection from the real (not from the LAN) 100.100.100.0 is made to
the ISA server, is it then treated as a local address?

Thanks,

...D

-- 
CPDE - Certified Petroleum Distribution Engineer
CCBC - Certified Canadian Beer Consumer

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

All mail to and from this domain is GFI-scanned.



Other related posts: