RE: strange log entries

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 6 Oct 2005 09:33:51 -0500

Maybe the request was made to an address, or the client is acting in the
role of SecureNAT client for that connection.

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls

 

> -----Original Message-----
> From: tim.altena@xxxxxxxxxxxxxx [mailto:tim.altena@xxxxxxxxxxxxxx] 
> Sent: Thursday, October 06, 2005 9:24 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] strange log entries
> 
> http://www.ISAserver.org
> 
> I have one PC that is logging only IP address information on the ISA
> server.  See below
> 
> ClientIp      ClientUsername  DestHost                URI
> 174331110     ORANGE_FACT\tima        206.65.174.102
> http://206.65.174.102/us.yimg.com/a/1-/flash/promotions/yahoo/
> 051006/70i
> lt.gif
> 
> Every other PC is logging the FQDN for desthost and in the URL.  Has
> anyone seen this before?  I checked and the user is going to the FQDN
> not the IP address in the browser.  Oh they are setup as 
> Firewall Client
> and WebProxy client.
> 
> Tim
> 
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 


Other related posts: