Re: ISA 2004 thinks that my clients are spoofing packets?

Tech-Archive recommends: Fix windows errors by optimizing your registry

Do you have three different IP's bound to your internal interface? or do you
have three different interfaces each one with one IP from the X.Y.X subnet.
If you have three different interfaces then that's your issues, each
interface needs to be connected to its own segment, each from a different
subnet.

Virgil



<seventhpoint@xxxxxxxxx> wrote in message
news:1129134632.299226.79230@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Could someone point me to a link or something where I could learn why
> ISA is giving back an error message when my clients try to use the
> proxy server?
>
> The error message is: 0xc0040014 FWX_E_FWE_SPOOFING_PACKET_DROPPED
>
> The client I am trying to connect to is part of an internal network I
> setup in the array (called "FP_Proxy_Clients") that is allowed access
> to the ISA server. The ISA server has three IPs X.Y.Z.38, X.Y.Z.39,
> X.Y.Z.40 and the client computer is on the same class C (X.Y.Z.35). My
> subnet on both computers is 255.255.255.0 and I know they can talk to
> eachother.
>
> I cannot ping the ISA server from any computer that is setup on
> FP_Proxy_Clients. However, if I use a computer on the same subnet
> (X.Y.Z.43) but not in the FP_Proxy_Clients I can ping it no problem.
> Obviously it is something easy that I am missing but I don't know what.
>
> Is there a Network I need to add? or maybe a Network Rule? I have
> googled the error and I cannot find anything about it - which prolly
> means I am really stupid. Any help or link would be appreciated, even
> if you feel the need to put an obligatory RTFM in there somewhere. ty
> in advance.
>


.

Relevant Pages

  • Re: IPPNP
    ... If the client pc is configured with DHCP they ... The short answer is that this appears to be some kind of MAC based gateway protocol; basically, an 'internet access device' will forward any traffic it sees for a subnet which it isn't configured with, by spoofing ARP traffic so as to make it appear as though it is on that subnet. ... This sounds like a configuration nightmare to implement correctly, and goodness help you if you have more than one of these things connected to the same network. ... Whilst it probably can be done in the network stack, I speculate it couldn't be turned on at the same time as a number of other features such as Proxy ARP, or CARP, and may have problems scaling to more than a two-armed router (that is, 1 WAN uplink, and 1 Ethernet interface running this stuff). ...
    (freebsd-net)
  • Re: ISA net configuration In Vlan and multiple Internals network
    ... Correct me if I am wrong, but this is more of a network aggregation problem? ... Is your networks subnet contiguously? ... interface are defined on the 6500, meaning it is only layer 2. ... 5---For each vlan interface i have setup the ip address appropriate ip ...
    (microsoft.public.isa.configuration)
  • Re: Multiple Interfaces
    ... >> the same subnet, which is what your included config shows. ... That interface can't be default gateway. ... you have two interfaces on the same network. ... implementation details on the various FreeBSD network stacks. ...
    (freebsd-net)
  • Routing and RRAS Problem - Pleasehelp
    ... but the problem is the PC's on the subnet 1 cannot access the Internet. ... router that is running a DHCP, The IP of the router is ... enable RRAS, and is running fine, Interface called INTERNET is connected to ...
    (microsoft.public.windows.server.networking)
  • Re: Routing and RRAS Problem - Pleasehelp
    ... Interface List ... but the problem is the PC's on the subnet 1 cannot access the Internet. ... router that is running a DHCP, The IP of the router is ... enable RRAS, and is running fine, Interface called INTERNET is connected to ...
    (microsoft.public.windows.server.networking)