RE: SERVICE FIREWALL

  • From: Jim Harrison <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Sun, 28 Sep 2003 21:08:04 -0700

Don't put your external IP range in the LAT.
Ever.
When you do this, anyone can use your ISA as an open proxy.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!


On Sun, 28 Sep 2003 14:55:52 +0100
 "Rafael Narezzi" <rafael@xxxxxxxxxx> wrote:
http://www.ISAserver.org


Thanks
But if I Put the Lat 192.168.X.X to 192.168.X.X and This other the my
Internet 200.200.200.X to 200.200.200.X and then my firewall services is
full may be with a 100 hundred conections and I can't to acess my
computer for other computer ex. 200.200.200.X/tsweb
??/
Thanks

Rafael Narezzi 
 IT Consultant
http://www.sei.inf.br
http://www.indaia.net
rafael@xxxxxxxxxx

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: Sunday, September 28, 2003 1:18 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SERVICE FIREWALL

http://www.ISAserver.org


Hi Rafeal,

Firewall service connections will only appear for LAT hosts. Therefore,
if there are connections from hosts that are not in your company, your
LAT is misconfigured and your firewall is now owned by a malicious
character.  First, determine where the misconfiguration is located, then
reformat and reinstall the firewall.

HTH,
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 


-----Original Message-----
From: Rafael Narezzi [mailto:rafael@xxxxxxxxxx] 
Sent: Saturday, September 27, 2003 5:38 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SERVICE FIREWALL

http://www.ISAserver.org


In the MONITORING > SERVICES > FIREWALL 
And have a 100 connections in ANONYMOUS 
I don't understand 
Thanks

Rafael Narezzi 
 IT Consultant
http://www.sei.inf.br
http://www.indaia.net
rafael@xxxxxxxxxx

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
Sent: Saturday, September 27, 2003 8:40 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: SERVICE FIREWALL

http://www.ISAserver.org


Hi Rafael,

Where are you seeing 100 connections?

Thanks!
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 
________________________________________
From: Rafael Narezzi [mailto:rafael@xxxxxxxxxx] 
Sent: Friday, September 26, 2003 10:41 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] SERVICE FIREWALL

http://www.ISAserver.org
Hi Guys,
Anybody can help me please ?
How can I make to do for not show for me In the firewall services a 100
connections just connections the my company??

Thanks

Rafael Narezzi 
 IT Consultant
http://www.sei.inf.br
http://www.indaia.net
rafael@xxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub') 


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
rafael@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
rafael@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*

All mail from this domain is virus-scanned with RAV.
www.ravantivirus.com

^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*^*



Other related posts: