Welcome to ISAserver.org

Can someone help me? Not sure really what to do.. Ive tried alot

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Management >> Can someone help me? Not sure really what to do.. Ive tried alot

Page: [1]

Message

<< Older Topic Newer Topic >>

Can someone help me? Not sure really what to do.. Ive t... - 21.Jun.2005 11:27:00 AM

talon

Posts: 12
Joined: 21.Jan.2005
From: Rockford, MI
Status: offline

Description: ISA Server detected routes through adapter WAN 66.166.248.x that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.) The address ranges in conflict are: 10.2.2.1-10.2.2.252;10.1.1.0-10.1.1.0;10.1.1.253-10.1.1.255;10.255.255.255-10.255.255.255;.
<br>ISA Server detected routes through adapter LAN 10.1.1.100 that do not correlate with the network element to which this adapter belongs. For best practice, the address range of an ISA Server network should match the address ranges routable through the associated network adapter as defined in the routing table. Otherwise valid packets may be dropped as spoofed. (This alert may occur momentarily when you create a remote site network. You may safely ignore this message if it does not reoccur.) The address ranges in conflict are: 10.1.1.0-10.1.1.0;10.1.1.253-10.1.1.255;10.2.2.1-10.2.2.252;.

Post #: 1

Featured Links*

RE: Can someone help me? Not sure really what to do.. I... - 26.Jun.2005 10:08:00 AM

tshinder

Posts: 47420
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Talon,

How have you configured your ISA firewall Networks?

Thanks!
Tom

(in reply to talon)

Post #: 2

RE: Can someone help me? Not sure really what to do.. I... - 26.Jun.2005 8:04:00 PM

talon

Posts: 12
Joined: 21.Jan.2005
From: Rockford, MI
Status: offline

Edge FW. NAT's enabled for routing.
Blocks internet traffic, and routes WAN IP's to internal using rulesets. --

Jason

(in reply to talon)

Post #: 3

RE: Can someone help me? Not sure really what to do.. I... - 30.Jun.2005 9:24:00 AM

pwaldeier

Posts: 36
Joined: 18.Feb.2004
From: Pennsauken NJ
Status: offline

Talon,

I believe you need to include the network address and broadcast address in the range you supply to ISA. Alternatively, you may need to make routinh table entries in Windows for addresses not defined by NIC IP addresses/masks.

PaulW

(in reply to talon)

Post #: 4

RE: Can someone help me? Not sure really what to do.. I... - 30.Jun.2005 10:35:00 AM

talon

Posts: 12
Joined: 21.Jan.2005
From: Rockford, MI
Status: offline

So I would have to do a route -add for the IP's not listed ? And when I route do I need to route it to my ISA? ie. make sure the gw address is the ISA?

(in reply to talon)

Post #: 5