• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Logging showing address not from me

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> Logging showing address not from me Page: [1]
Login
Message << Older Topic   Newer Topic >>
Logging showing address not from me - 6.Mar.2005 6:25:00 AM   
luckymarble

 

Posts: 3
Joined: 2.Mar.2005
Status: offline
New to ISA.
Just installed ISA 2004 on Win2003. In logging I am getting many Denied Connections from 192.168.0.x on Protocal Netbios Name Service. Source and Destination are both external. I am on a 10.x.x.x network. Why would I see this?
Is this an attack, or normal behavior? I am getting it every 10seconds or so. Can this affect my Bandwidth and how do I stop it?

Appreciate any help. Thanks
Post #: 1
RE: Logging showing address not from me - 6.Mar.2005 7:01:00 PM   
Ara.A

 

Posts: 259
Joined: 21.Oct.2004
Status: offline
What is your internal and external ip address range? This might be due to miss configuration. Also make sure netbios over ip is disabled on external nic
When you set it up, did you add all private range or only the internal ip address?

(in reply to luckymarble)
Post #: 2
RE: Logging showing address not from me - 6.Mar.2005 10:21:00 PM   
luckymarble

 

Posts: 3
Joined: 2.Mar.2005
Status: offline
Internal address is 10.3.14.0 - 10.3.15.254, external is 69.27.228.x/30.
Netbios is disabled and added private range.
Been having some problems with DNS, would that cause this type of problems?
Thanks for the help, Stu

(in reply to luckymarble)
Post #: 3
RE: Logging showing address not from me - 6.Mar.2005 10:45:00 PM   
luckymarble

 

Posts: 3
Joined: 2.Mar.2005
Status: offline
That same 192 network is also doing DHCP requests. All the requests are getting denied, but do not know where they are coming from. It does say external network, except for DHCP the destination is local host.

Thanks again for any words of wisdom.

(in reply to luckymarble)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Logging and Reporting >> Logging showing address not from me Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts