Re: 0xc0040014 FWX_E_FWE_SPOOFING_PACKET_DROPPED


TimS wrote:
Additional information: The 'Client IP' displayed for this error in the log
is the IP of my external system out on the internet, and the 'Destination IP'
is the IP of the ISA Server's DMZ NIC. But its not the public IP - rather,
it's the DMZ IP. Is there something special I need to do in the ISA server
configuration to tell it the public IP that is NATd to its DMZ IP?

"TimS" wrote:

I have an ISA 2006 server in our DMZ with two NICs - one in the DMZ and one
in the internal network. The DMZ NIC is NATd to a public IP on our
Checkpoint firewall, which has the public connection. The ISA box is set up
as the 'Back Firewall' with the front firewall being the checkpoint
appliance. I have published a website from the internal network for access
via the ISA server, but cannot get to it. The ISA server is logging 'Denied
Connection' actions at each attempt, with the result code "0xc0040014
FWX_E_FWE_SPOOFING_PACKET_DROPPED."
Is there something about my setup that is wrong?
Thanks
Tim

.

Relevant Pages

  • RE: SBS Premium, Secure Banking site, certificate = no joy
    ... firewall client installed cannot access a specific banking web site. ... settings and create the ISA rules. ... 825763 How to configure Internet access in Windows Small Business Server ... On the ISA Server computer, stop the Microsoft Firewall service. ...
    (microsoft.public.windows.server.sbs)
  • Re: Moving from ISA 2000 to ISA 2004...
    ... firewall in your organization, which will have one internal IP from the ... inherent delay that DNS caching introduces on the Internet). ... As far as internal clients go, ... I'm looking to move from ISA 2K to ISA 2K4. ...
    (microsoft.public.isaserver)
  • Re: Moving from ISA 2000 to ISA 2004...
    ... firewall in your organization, which will have one internal IP from the ... some inherent delay that DNS caching introduces on the Internet). ... As far as internal clients go, ... I'm looking to move from ISA 2K to ISA 2K4. ...
    (microsoft.public.isaserver)
  • Re: Moving from ISA 2000 to ISA 2004...
    ... firewall in your organization, which will have one internal IP from the ... that DNS caching introduces on the Internet). ... As far as internal clients go, ... I'm looking to move from ISA 2K to ISA 2K4. ...
    (microsoft.public.isaserver)
  • Re: ISA2K Firewalldienst
    ... dass die InternetConnection Firewall ... > Nr.1 Der Firewalldienst des ISA startet nicht. ... > deaktivieren Sie bitte den Dienst mit dem Namen "Internet Connection ...
    (microsoft.public.de.german.isaserver)
Loading