Welcome to ISAserver.org

Spoof Warnings

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> Spoof Warnings

Page: [1]

Message

<< Older Topic Newer Topic >>

Spoof Warnings - 22.Jan.2001 3:11:00 AM

cbrown

Posts: 1
Joined: 22.Jan.2001
From: Tacoma, WA, USA
Status: offline

I have an ISA server with 2 cable modems for redundancy. I have metric settings on each nic card to force upstream through a specific cable modem.

When an attempt is made to access the other nic with a higher metric I get spoof warnings. The event viewer says that the originating ip is unreachable.

I believe that this is because the nic card cannot respond direct because it wants to route the request out the nic with the lower metric and ISA doesn't know how to respond to that.
Does anyone know a fix or workaround?

Thanks

Post #: 1

Featured Links*

RE: Spoof Warnings - 25.Jan.2001 7:07:00 AM

Guest

I've got a similar problem - My scenario is a 576kbps ADSL router with NAT at the telco end and a 128kbps DSL router with a public IP.

I want to use the ADSL box for general internet, so metric is 1 and 2K / ISA(correctly) the picks it for the default route. I want to use the public IP on the slower DSL box for VPN so it's metric is set to 2 (2K/ISA still knows it's got a gateway in the routing table, again correctly).

However, any packets comming from the public IP to the ISA server are flagged as spoof packets - EVEN if I set up a static route to the host they're comming from on that interface and the IP is clearly reachable via it.

Check out my post on
news://microsoft.public.isa.beta for more details.

BTW, unless the 2 cable modems are from different telcos on different physical lines, they're not going be to terribly redundant.

(in reply to cbrown)

Post #: 2