RE: Unidentified traffic to exchange server
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 17 Mar 2006 07:24:54 -0800
Log snip?
This is sounding more like an ICMP response than anything else.
-----Original Message-----
From: Bunting, Jeff [mailto:BUNTING@xxxxxxxxxxxx]
Sent: Friday, March 17, 2006 6:48 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Unidentified traffic to exchange server
http://www.ISAserver.org
I'm seeing repeated denied connections from the internal ISA NIC to the
backend Exchange server in ths ISA logs. They all have source port of 5
and destination of 1 and show protocol as "unidentified ip traffic".
result code is "0xc004000d FWX_E_POLICY_RULES_DENIED".
Anyone have an idea what might be wrong?
ISA 2004 SP1, Exchange 2003 SP2. I have OWA published from FE and RPC
over HTTP set up.
Also have POP3S and SMTPS published, but no one is using it. Inbound
SMTP is going to the FE server.
thanks,
Jeff
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
Other related posts:
