Re: Odd UDP ports blocked
- From: "Mark Strangways" <strangconst@xxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 12 Sep 2001 19:44:30 -0400
MessageI don't know... why do my isa report summary have data, but the sub
reports show nil ?
There are some odd things going on in ISA it seems.
regards,
Mark
----- Original Message -----
From: Peter J. Persing
To: [ISAserver.org Discussion List]
Sent: Wednesday, September 12, 2001 7:19 PM
Subject: [isalist] Re: Odd UDP ports blocked
http://www.ISAserver.org
How did they even get through the external interface to get blocked if the
network card was configured with NetBIOS over TCP/IP disabled??
Pete
On the Blackfoot River in the great state of Montana
-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxx]
Sent: Wednesday, September 12, 2001 5:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Odd UDP ports blocked
http://www.ISAserver.org
Notice that they were blocked .
But it did get me to check though :-)
regards,
Mark
----- Original Message -----
From: Peter J. Persing
To: [ISAserver.org Discussion List]
Sent: Wednesday, September 12, 2001 6:51 PM
Subject: [isalist] Re: Odd UDP ports blocked
http://www.ISAserver.org
How can UDP 137/138 (NetBios name service/Datagram Service) get through
if he has net bios over TCP/IP turned of on the external network interface as
he should have.
Pete
On the Blackfoot River in the great state of Montana
-----Original Message-----
From: Mark Strangways [mailto:strangconst@xxxxxxxx]
Sent: Wednesday, September 12, 2001 3:42 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: Odd UDP ports blocked
http://www.ISAserver.org
Well, my ISP is @home. The ip in question isn't an @home based network
ID.
It belongs to the netblock of linklocal, but that's about all I can
find out about it.
Regards,
Mark
----- Original Message -----
From: Jim Harrison
To: [ISAserver.org Discussion List]
Sent: Wednesday, September 12, 2001 5:22 PM
Subject: [isalist] Re: Odd UDP ports blocked
http://www.ISAserver.org
Someone on your ISP side of things has a Windows 98SE or higher OS
that is using AIPA and is still trying to get an address from a DHCP server.
Jim Harrison
MCP(2K), A+, Network+, PCG
----- Original Message -----
From: Mark Strangways
To: [ISAserver.org Discussion List]
Sent: Wednesday, September 12, 2001 13:08
Subject: [isalist] Odd UDP ports blocked
http://www.ISAserver.org
Included below is a clip from my Packet filter log. I understand
that is is NOT getting thru, but does
anyone think I should be informing someone of the attack.
Or am I just paranoid ?
Thanks in advance for your responses
Mark
2001-09-12 19:28:22 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:28:32 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:28:38 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:28:42 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:28:52 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:29:02 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:29:06 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:29:07 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:29:08 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:29:09 169.254.97.143 169.254.255.255 Udp 137 137 -
BLOCKED 24.43.154.219
2001-09-12 19:29:10 169.254.97.143 169.254.255.255 Udp 137 137 -
BLOCKED 24.43.154.219
2001-09-12 19:29:10 169.254.97.143 169.254.255.255 Udp 137 137 -
BLOCKED 24.43.154.219
2001-09-12 19:29:11 169.254.97.143 169.254.255.255 Udp 137 137 -
BLOCKED 24.43.154.219
2001-09-12 19:29:12 169.254.97.143 169.254.255.255 Udp 137 137 -
BLOCKED 24.43.154.219
2001-09-12 19:29:12 169.254.97.143 169.254.255.255 Udp 137 137 -
BLOCKED 24.43.154.219
2001-09-12 19:29:13 169.254.97.143 169.254.255.255 Udp 137 137 -
BLOCKED 24.43.154.219
2001-09-12 19:29:14 169.254.97.143 169.254.255.255 Udp 137 137 -
BLOCKED 24.43.154.219
2001-09-12 19:29:15 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:29:15 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:29:15 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:29:30 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:31:00 169.254.97.143 169.254.255.255 Udp 138 138 -
BLOCKED 24.43.154.219
2001-09-12 19:31:30 169.254.97.143 169.254.255.255 Udp 138 138
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List
as: jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List
as: strangconst@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
strangconst@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
peter@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
strangconst@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
