Re: Am I being attacked?


"BoboTWG" <bobotwg@xxxxxxxxxxxxxxxxxxx> wrote in message
news:FUbxf.15$or4.13@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
>
> "Lanwench [MVP - Exchange]"
> <lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
> message news:eHotDVtFGHA.984@xxxxxxxxxxxxxxxxxxxxxxx
>>
>> "BoboTWG" <bobotwg@xxxxxxxxxxxxxxxxxxx> wrote in message
>> news:pwaxf.49805$BZ5.46334@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
>>> Hello. Had mucho problems last week when SBC went to upgrade our speed
>>> package on our DSL line. We were down for a couple of days due to them
>>> deciding to change our static IP addresses without our knowledge. It
>>> also turned out that we were dopping tons of packets but that was
>>> supposedly fixed when we did not route the DSL line through our
>>> UPS/Surge protector. I am noticing that I am still getting some "spoof
>>> attack" warnings in my event viewer. Is there any way to tell if this is
>>> caused by more hardware issues or if I am really getting attacked?
>>> Thanks in advance.
>>>
>>> Aaron
>>>
>>
>> You aren't using public IPs on your internal network for some reason, are
>> you? Nothing on your LAN should have changed just because your public IP
>> address changed.
>>
>> Do you run SBS Standard, or Premium w/ISA? If the former ,what kind of
>> firewall are you connecting to (between your DSL modem and your
>> LAN-connected computers)?
>>
>
> Hi Lanwench. Thanks for the reply. Going to copy and paste your questions
> with my answers below to save me confusion.
>
> -You aren't using public IPs on your internal network for some reason, are
> you?
>
> Nope. My internal IP addresses are all 192.168.16.*

Great....that is a good thing.
>
> -Nothing on your LAN should have changed just because your public IP
> address changed.
>
> Internal I was still up and running but could not hit the outside world
> and Exchange was down.

"Exchange was down" means that it had no Internet connectivity but was still
fine for internal users?
>
> I am running SBS Premium w/ISA etc. Just using the built in firewall for
> now. The customer does not want to spring for more until they feel it is
> really needed.

So you're using ISA, then, right? Not just the Windows firewall?
>
> Thanks again. I look forward to your reply.
>
> Aaron
>
>


.

Relevant Pages

  • Re: running jail with alternate IP
    ... > I am currently setting up a firewall that translates my internal network ... > in having the internal computers use those extra public IPs. ... it seems as if jail is sending packets on the main IP ... provider and the internet, only 1 of those ips can have it's netmask set ...
    (FreeBSD-Security)
  • Gateway Firewall how
    ... internal pcs browsing the internet with 1 public IP. ... each having 1 or more public IPs. ... All I need to do is set up a firewall that all outside traffic has ... to go through before it gets sent on to the various internal web servers. ...
    (comp.os.linux.security)
  • Wireless Firewall or Router?
    ... laptop at home I connect to the internet thru a hardware linksys router ... (DSL). ... I turned on XP firewall, but I read that it might not be enough. ... my hardware linksys router when I try to connect to the internet at home thru ...
    (microsoft.public.windowsxp.general)
  • Re: Gateway Firewall how
    ... > multiple internal pcs browsing the internet with 1 public IP. ... > for all of my web servers. ... > public IPs. ... All I need to do is set up a firewall that all ...
    (comp.os.linux.security)
  • Re: firewalls
    ... > I am going DSL, running a router and a wireless network for my home. ... Before I go into the intricacies of OS/2's built-in firewall (eCS has ... home net from the Internet. ...
    (comp.os.os2.apps)