Re: RE : Re: ISA close the connection after 50 PASV
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 29 Jan 2003 08:05:21 -0800
That sounds like a (weak) DoS attack.
Why would the client need to issue 50 consecutive PASV commands to the same
server?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://www.microsoft.com/isaserver
http://isaserver.org/pages/author_index.asp?aut=3
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Olivier PHILIPP" <ophilipp@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, January 29, 2003 03:25
Subject: [isalist] RE : Re: ISA close the connection after 50 PASV
http://www.ISAserver.org
Hi Jim.
Yes they are all from the same client...
-----Message d'origine-----
De : Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Envoyé : lundi 27 janvier 2003 23:12
À : [ISAserver.org Discussion List]
Objet : [isalist] Re: ISA close the connection after 50 PASV
http://www.ISAserver.org
Are they all from the same client?
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG http://www.microsoft.com/isaserver
http://isaserver.org/pages/author_index.asp?aut=3
http://isatools.org
Read the help, books and articles!
----- Original Message -----
From: "Olivier PHILIPP" <ophilipp@xxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, January 27, 2003 09:02
Subject: [isalist] ISA close the connection after 50 PASV
http://www.ISAserver.org
Hi everybody
I access my FTP server in PASSIVE MODE, through ISA server, from the
internal network to the DMZ.
When my FTP server is configured in 21 port, all is ok.
When my FTP server is configured in a weird port (ie 2121), ISA close
the connection after 50 PASV commands.
Any idea ???
THANKS
=================
Votre email a ete controle avec AntiVir
par www.leclubauto.com le 29/01/2003 12:25:33 (TMTTM)
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/ Windows
Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/ Windows
Security Resource Site: http://www.windowsecurity.com/ Windows 2000/NT
Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
ophilipp@xxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
