• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

All port scan attack

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> General >> All port scan attack Page: [1]
Login
Message << Older Topic   Newer Topic >>
All port scan attack - 7.Aug.2003 2:45:00 PM   
rintpete

 

Posts: 25
Joined: 30.Jul.2003
Status: offline
Hello everyone,

I am currently getting bombarded by scan attacks from a certain IP Address. I traced it back to a NameServer and the logs state that its making standard DNS requests. The NameServer is not mine or from my ISP.

ISA has blocked this IP but I'm still getting attacks. The question I have is should I disable the block on this IP (considering its a name server), and secondly does ISA have a habit of misreporting standard DNS requests?

Thanks for your help,
- Rintpete
Post #: 1
RE: All port scan attack - 7.Aug.2003 5:11:00 PM   
BaanMan

 

Posts: 20
Joined: 15.Apr.2002
From: Germany
Status: offline
Hey RintPete,

try to use a specified Outside-DNS-Server as Forwarder in your DNS-Settings.

Try only 62.225.248.240 It's a good old german DNS

Good Luck !

(in reply to rintpete)
Post #: 2

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> General >> All port scan attack Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts