Welcome to ISAserver.org

Keep getting spoofing errors & Firewall will not Initialise

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> H.323 Gatekeeper >> Keep getting spoofing errors & Firewall will not Initialise

Page: [1]

Message

<< Older Topic Newer Topic >>

Keep getting spoofing errors & Firewall will not In... - 10.Feb.2004 4:39:00 PM

mmed-2003

Posts: 6
Joined: 2.Feb.2004
Status: offline

Hi everyone

Right im fairly new to ISA server but very keen to learn. I have have managed to setup an ISA server which enables me to share internet access etc .... via a hub and wireless access point. Thats all great...As I am a complete novice I went through the tutorials and configured it so I am allowing all traffic. I know this is not good and Im going to be changing this v soon. I just wanted to see it all working.

Heres the problem: I keep getting these types of errors:
++++++++++++++++++++++++++++++++++++++++++++++
ISA Server detected a spoof attack from Internet Protocol (IP) address 10.93.0.1. A spoof attack occurs when an IP address that is not reachable via the interface on which the packet was received. If logging for dropped packets is set, you can view details in the packet filter log.

++++++++++++++++++++++++++++++++++++++++++++++++

also from my remote machines being able to have access it sometimes drops and then I think ive screwed somthing up. But when i release the ip from my external and renew its all ok again. Obviously im being spoofed, screwed etc etc.. I want to secure the server and block all necessarry ports. I just want to enable http access for the remote machines and maybe ftp but thats really about it.

Also i downloaded the spacks and now its stopped my Firewall and when i go to start it, it comes up with an error :

+++++++++++++++++++++++++++++++++++++++++++++==
Microsoft Firewall failed. The failure occurred during Initialization of Network Address Translation (NAT) because the system call PNATInit failed. Use the source location 308.1151.3.0.1200.166 to report the failure. The error code in the Data area of the event properties indicates the cause of the failure. This failure may be due to the Internet Connection Firewall (ICF) service being enabled. If it is enabled, please disable the service named "Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS)" (SharedAccess). Then, restart the computer. For more information about this event, see ISA Server Help. The error description is: Access is denied.
++++++++++++++++++++++++++++++++++++++++++++++++

what do i need to do..? I suppose i should take off the allow all rule?? but im not sure which ports i should be blocking...thanks for your help...

MM