RE: all port scan attack

  • From: FRAEYE MIKE <Mike.Fraeye@xxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 19 Aug 2002 10:43:37 +0200

Have the same problem also .....

What is the correct way to handle this problem ?

Kindest regards,
Mike

-----Original Message-----
From: ertan.gokalp@xxxxxxxxxx [mailto:ertan.gokalp@xxxxxxxxxx]
Sent: donderdag 8 augustus 2002 15:51
To: [ISAserver.org Discussion List]
Subject: [isalist] all port scan attack


http://www.ISAserver.org


Hi,

My ISA server sends me the following message

"""ISA Server name: aaaaaa

ISA Server detected a well-known port scan attack from Internet Protocol
(IP) address xxx.xxx.xxx.xxx. A well-known port is any port in the range
of 1-2048. For more information about this event, see ISA Server Help."""

xxx.xxx.xxx.xxx ih the external IP of the ISA server.??????

I don't understand why it attacks itself , what is the meanning of this
message.Please help me.

Ertan



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
mike.fraeye@xxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: