RE: RES: Network Sniffer

  • From: "Mark Hopkins" <mark@xxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 4 Nov 2002 11:56:04 -0600

INTERNET <====> CISCO ROUTER <====> ISA SERVER <====> INTERNAL NETWORK

-----Original Message-----
From: Alex Decarli [mailto:alex@xxxxxxxxxxxxx]
Sent: Monday, November 04, 2002 11:48 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RES: Network Sniffer


http://www.ISAserver.org


Who is the gateway of DMZ ?

-----Mensagem original-----
De: Mark Hopkins [mailto:mark@xxxxxxxxxxxxx]
Enviada em: segunda-feira, 4 de novembro de 2002 15:47
Para: [ISAserver.org Discussion List]
Assunto: [isalist] Network Sniffer


http://www.ISAserver.org


Hello,

I have placed a network sniffer on my DMZ enabling the collection all packets 
entering and leaving my enterprise. I also use ISA Server to connect my DMZ to 
my internal network. All packets coming from my internal network have a source 
address of the external NIC on the ISA Server. There must be a way of 
correcting this because before the rebuild of the ISA Server, the packet source 
addresses were the actual source, and not the ISA Server. So I must have 
changed some property within the ISA Server, but I cannot recall which one. Can 
anyone help me with this? Thanks.

Mark

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
alex@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
mark@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

Other related posts: