Take a look at this: http://www.isaserver.org/pages/tutorials/setting_up_machine_before_isa_insta lltion.htm Also, if you've disabled packet filtering, you're wide open to the world. Jim Harrison MCP(NT4, 2K), A+, Network+, PCG ----- Original Message ----- From: "Alin Selicean" <alin_selicean@xxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Monday, November 12, 2001 07:55 Subject: [isalist] Strange connections reported by netstat http://www.ISAserver.org Hi, all ! I scanned my ISA external interface for open ports and I noticed that since last scan, 2 ports appear as open: 135 and 443. Issuing a netstat -an, I noticed these connections: UDP 0.0.0.0:37 *:* UDP 0.0.0.0:123 *:* UDP 0.0.0.0:135 *:* UDP 0.0.0.0:445 *:* UDP 0.0.0.0:3003 *:* UDP 0.0.0.0:3005 *:* UDP 0.0.0.0:3456 *:* UDP 0.0.0.0:3457 *:* UDP 0.0.0.0:17953 *:* UDP 0.0.0.0:18137 *:* UDP 127.0.0.1:53 *:* UDP 127.0.0.1:3004 *:* Are they normal connections ? I guess not. How can get rid of these and eventually closing those ports. Initially, I had only 2 ports open: 25 and 80. TIA, Alin ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')