Welcome to ISAserver.org

Spoof warnings

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> General >> Spoof warnings

Page: [1]

Message

<< Older Topic Newer Topic >>

Spoof warnings - 4.Mar.2004 11:26:00 AM

coyote_nl

Posts: 2
Joined: 4.Mar.2004
Status: offline

Need urgent help!

I'm running ISA 2004B2 between this subnets:

10.94.1.0/24 <--- ISA2004 ---> 10.38.0.0/16
EXTERNAL < ROUTE > INTERNAL

ISA acts as a router (not NAT)

When I define 10.94.1.0 as external network, all packets are denied from 10.94.1.0 to the internal network and we get IP Spoofing warnings.
I must define 10.94.1.0 to get the proxy working for this subnet.

How can we work around this problem?
Is it possible to maybe disable Spoofing detection?

Thank you!

Post #: 1

Featured Links*

RE: Spoof warnings - 4.Mar.2004 12:20:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Coyote,

Those appear to be different network IDs, so I don't see why you are getting spoof errors.

HTH,
Tom

(in reply to coyote_nl)

Post #: 2

RE: Spoof warnings - 4.Mar.2004 12:45:00 PM

coyote_nl

Posts: 2
Joined: 4.Mar.2004
Status: offline

Hi Tom,

I just rebuild the network in vmware and could reproduce the problem.

I don't seem to get IP Spoofing warnings though but all packets from and to 10.94.1.0/24 are denied when I create the 10.94.1.0 as an external network.
Is this a bug maybe, because 10.94.10 and 10.38.0.0 are both original class A networks?

(in reply to coyote_nl)

Post #: 3

RE: Spoof warnings - 4.Mar.2004 2:45:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Coyote,

What happens when you change the subnet mask on the internal network to /24?

Also, what addresses are included in the Internet Network definition in the Networks Node of the console?

Thanks!
Tom

[ March 04, 2004, 02:46 PM: Message edited by: tshinder ]

(in reply to coyote_nl)

Post #: 4