Re: who can help me ?
- From: "Jim Harrison" <jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 4 Nov 2002 09:25:34 -0800
None of those entries show a request for the site as defined in your
destination set.
Also, none of those entries show a request from an external host; they all
come from 192.168.0.111 or .254, both of which are internal IP addresses..
In order for anyone to help you, you have to provide the information that's
asked for.
The log entries that we care about are those that show an external host
requesting the published service.
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/pages/author_index.asp?aut=3
http://isatools.org
Read the help / books / articles!
----- Original Message -----
From: "Qusai Ali AL Haddad" <qusai@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Sunday, November 03, 2002 7:59 PM
Subject: [isalist] Re: who can help me ?
http://www.ISAserver.org
dear Jim this is the web log
Regards
Qusai
#Software: Microsoft(R) Internet Security and Acceleration Server 2000
#Version: 1.0
#Date: 2002-11-04 00:02:53
#Fields: c-ip cs-username c-agent date time s-computername cs-referred
r-host r-ip r-port time-taken cs-bytes sc-bytes cs-protocol s-operation
cs-uri s-object-source sc-status
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 00:02:53
QNET - www.iopusemail.com - 80 15 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 00:08:51
QNET - www.iopusemail.com - 80 15 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 00:14:48
QNET - www.iopusemail.com - 80 16 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 00:20:49
QNET - www.iopusemail.com - 80 - 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 00:26:45
QNET - www.iopusemail.com - 80 16 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 00:32:43
QNET - www.iopusemail.com - 80 16 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 00:38:42
QNET - www.iopusemail.com - 80 16 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 00:44:39
QNET - www.iopusemail.com - 80 16 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 00:50:37
QNET - www.iopusemail.com - 80 15 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 00:56:36
QNET - www.iopusemail.com - 80 16 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 01:02:33
QNET - www.iopusemail.com - 80 - 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 01:08:30
QNET - www.iopusemail.com - 80 16 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.254 anonymous 1.02_PROXY_AC-Plug by IOPUS 2002-11-04 01:14:30
QNET - www.iopusemail.com - 80 16 121 272 http GET
http://www.iopusemail.com/index_c.htm Cache 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:14:35 QNET - www.winning-deals.net
205.244.71.20 80 407 351 3494 http GET
http://www.winning-deals.net/email/090902-bluemini-wd/logo.gif Inet 200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:14:36 QNET - www.winning-deals.net
205.244.71.20 80 984 344 - http GET
http://www.winning-deals.net/email/wdbanner/wd_vaio.gif Inet 10054
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:14:36 QNET - www.printpal.com 66.54.0.231
80 1141 328 - http GET http://www.printpal.com/mailing_new/sec1.gif Inet
10054
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:14:36 QNET - www.printpal.com 66.54.0.231
80 1313 328 - http GET http://www.printpal.com/mailing_new/sec2.gif Inet
10054
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:18 QNET - www.printpal.com 66.54.0.231
80 1313 328 8993 http GET http://www.printpal.com/mailing_new/sec1.gif Inet
200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:18 QNET - www.winning-deals.net
205.244.71.20 80 1453 344 13736 http GET
http://www.winning-deals.net/email/wdbanner/wd_vaio.gif Inet 200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:18 QNET - www.printpal.com 66.54.0.231
80 1469 328 7286 http GET http://www.printpal.com/mailing_new/sec2.gif Inet
10054
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:18 QNET - www.printpal.com 66.54.0.231
80 437 328 - http GET http://www.printpal.com/mailing_new/sec3.gif Inet
10054
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:22 QNET - www.printpal.com 66.54.0.231
80 500 434 3990 http GET http://www.printpal.com/mailing_new/sec2.gif Inet
206
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:22 QNET - www.printpal.com 66.54.0.231
80 437 328 - http GET http://www.printpal.com/mailing_new/sec4.gif Inet
10054
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:22 QNET - www.printpal.com 66.54.0.231
80 1016 328 - http GET http://www.printpal.com/mailing_new/sec3.gif Inet
10054
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:23 QNET - www.colonize.com
216.15.251.150 80 234 333 1034 http GET
http://www.colonize.com/images/chasehtmltn_2a.gif Inet 200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:23 QNET - www.colonize.com
216.15.251.170 80 266 332 427 http GET
http://www.colonize.com/images/chasehtmltn_1.gif Inet 200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:23 QNET - www.colonize.com
216.15.251.150 80 156 345 881 http GET
http://www.colonize.com/images/chasehtmlRightRelationship.gif Inet 200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:23 QNET - www.colonize.com
216.15.251.170 80 328 339 4161 http GET
http://www.colonize.com/images/chasehtmlCMB2_99type.gif Inet 200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:23 QNET - www.colonize.com
216.15.251.150 80 235 333 343 http GET
http://www.colonize.com/images/chasehtmlpixel.gif Inet 200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:24 QNET - www.colonize.com
216.15.251.170 80 734 337 8070 http GET
http://www.colonize.com/images/chasehtmlApplyNew2.gif Inet 200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:24 QNET - www.colonize.com
216.15.251.150 80 765 338 9418 http GET
http://www.colonize.com/images/chasehtmlChasePlat4.gif Inet 200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:26 QNET - www.printpal.com 66.54.0.231
80 922 328 10618 http GET http://www.printpal.com/mailing_new/sec4.gif Inet
200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:26 QNET - www.printpal.com 66.54.0.231
80 969 328 9813 http GET http://www.printpal.com/mailing_new/sec3.gif Inet
200
192.168.1.111 anonymous MSMSGS 2002-11-04 01:15:48 QNET - g.msn.com
65.54.195.190 80 937 310 558 http GET
http://g.msn.com/5meen_us/60?Plcid=0409&Version=5.0&CLCID=0409&BrandID=MSMSG
S&Country=BH Inet 302
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:50 QNET - www.netdirect.nl 212.61.16.196
80 1485 559 1461 http GET http://www.netdirect.nl/servlet/_am?n=349&sid=571
Inet 200
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:15:52 QNET - www.netdirect.nl 212.61.16.196
80 1343 507 16128 http GET
http://www.netdirect.nl/servlet/___?action=src&n=704&cid=940&sid=571&href=ht
tp%3A//www.netdirect.nl/servlet/___%3Faction%3Dhref%26cid%3D940%26sid%3D571
Inet 200
192.168.1.111 anonymous MSMSGS 2002-11-04 01:15:58 QNET - svcs.microsoft.com
207.68.171.244 80 954 314 632 http GET
http://svcs.microsoft.com/svcs/mms/adxml_main.asp?Version=5.0&Plcid=0409&CLC
ID=0409&BrandID=MSMSGS&country=BH&PUID=000124481cf5c614&random=33204024 Inet
302
192.168.1.111 anonymous MSMSGS 2002-11-04 01:15:59 QNET - arc6.msn.com
65.54.194.120 80 953 320 758 http GET
http://arc6.msn.com/ADSAdClient31.dll?GetAd?PG=IMSCB1?SC=HF?PUID=000124481cf
5c614?AN=1.33204024 Inet 200
192.168.1.111 anonymous MSMSGS 2002-11-04 01:15:59 QNET - global.msads.net
217.32.247.3 80 219 219 4244 http GET
http://global.msads.net/ads/IMSCB1/004706650024_HF.gif VCache 304
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:22 QNET - www.hotmail.msn.com 64.4.52.7
80 1922 860 1933 http GET
http://www.hotmail.msn.com/cgi-bin/sbox?did=1&t=4VjfvKxn3DJTtF8oIuvj6Y8XzUwF
KftAPvQnFt0cCigRsAxbKguGMtHWJlcUlsSdZfXPj2O7y1f9OogaA7Dd47OA$$&p=4A2IO4x8KFO
FIuj4zjWgHVNmuW8R2cXHH7TtemCKM4Bov4DueRgSnD2OAvStlm5sDaiXQYtm99Oo!uPj2e8Rscl
HbcSvKIs*ilGcJI9UKIuzjHn69 Inet 302
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:24 QNET - sea2fd.sea2.hotmail.msn.com -
80 - 1575 133 http GET
http://sea2fd.sea2.hotmail.msn.com/cgi-bin/dasp/EN/hotmail___906000056.css
NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:24 QNET - sea2fd.sea2.hotmail.msn.com -
80 - 1574 133 http GET
http://sea2fd.sea2.hotmail.msn.com/cgi-bin/dasp/EN/hotmail___906050002.js
NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:24 QNET - 207.68.164.24 - 80 - 514 93
http GET http://207.68.164.24/spacer.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:24 QNET - 207.68.164.24 - 80 - 522 93
http GET http://207.68.164.24/lgo_msn_140x60.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:24 QNET - 207.68.164.24 - 80 - 514 93
http GET http://207.68.164.24/dosoEN.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:24 QNET - 207.68.164.24 - 80 - 517 93
http GET http://207.68.164.24/searchgo.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:24 QNET - 207.68.164.24 - 80 - 526 93
http GET http://207.68.164.24/lgo_0hm_129x36.off.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET - 207.68.164.24 - 80 - 520 93
http GET http://207.68.164.24/menu0.off.bg.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET - 207.68.164.24 - 80 - 530 93
http GET http://207.68.164.24/menu0.off.on.separator.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET - 207.68.164.24 - 80 16 519 93
http GET http://207.68.164.24/menu0.on.bg.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET - 207.68.164.24 - 80 - 529 93
http GET http://207.68.164.24/menu0.on.off.separator.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET - 207.68.164.24 - 80 - 531 93
http GET http://207.68.164.24/menu0.off.off.separator.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET - 207.68.164.24 - 80 - 521 93
http GET http://207.68.164.24/menu0.off.end.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET - 207.68.164.24 - 80 - 520 93
http GET http://207.68.164.24/menu0.end.bg.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET - 207.68.164.24 - 80 - 535 93
http GET http://207.68.164.24/format.horizontal.separator.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET - 207.68.164.24 - 80 - 512 93
http GET http://207.68.164.24/i.of.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET - 207.68.164.24 - 80 - 511 93
http GET http://207.68.164.24/i.cf.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET - 207.68.164.24 - 80 16 512 93
http GET http://207.68.164.24/desc.gif NotModified 0
192.168.1.111 anonymous Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1;
.NET CLR 1.0.3705) 2002-11-04 01:16:25 QNET -
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
