Re: Event 15108 - ISA Server detected a spoof attack..
- From: "Mark" <nospam@xxxxxxxxxxxxx>
- Date: Fri, 8 Sep 2006 10:53:47 +0930
Hi Dev,
Thanks for your suggestions.
1 - Disable Netbios on external NIC : Already configured that way
2 - File and printer sharing is already disabled. Only TCPIP is selected on
External NIC, and Netmon Network Packet Driver.
3 - Under TCPIP Properties/Advances/DNS tab - the Internal NIC is set to
"Register this connections address in DNS" - How can I check if it's trying
to register with external DNS? (I assume you mean external DNS = ISP DNS
server?)
3b - "Put the external DNS servers to internal DNS forwarders." - I'm not
sure what you mean by this exactly. Are you saying the external (ISP) DNS
servers should be manually entered in to SBS's own DNS records?
Thanks,
Mark
"DEV" <devrawat2@xxxxxxxxx> wrote in message
news:1157676462.198615.297890@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi ,
One morething I forgot ,
Remove WINS server from the card properties.
Regards
DEV
Microsoft EPS
DEV wrote:
Disable NetBIOS on the External ISA NIC so that it should not register
in the Internal DNS.
Uncheck file and printer sharing on the external card
Set the internal NIC to no longer register with any external DNS and
put the external DNS servers to internal DNS forwarders.
Restart all the ISA services.
Error message should stop.. if not lemme know..Will provide you with
some more steps
Regards,
DEV
Microsoft EPS
.
- Follow-Ups:
- References:
- Event 15108 - ISA Server detected a spoof attack..
- From: Mark
- Re: Event 15108 - ISA Server detected a spoof attack..
- From: DEV
- Re: Event 15108 - ISA Server detected a spoof attack..
- From: SuperGumby [SBS MVP]
- Re: Event 15108 - ISA Server detected a spoof attack..
- From: DEV
- Re: Event 15108 - ISA Server detected a spoof attack..
- From: DEV
- Event 15108 - ISA Server detected a spoof attack..
- Prev by Date: Cannot be verified are you sure you want ......
- Next by Date: Re: Event 15108 - ISA Server detected a spoof attack..
- Previous by thread: Re: Event 15108 - ISA Server detected a spoof attack..
- Next by thread: Re: Event 15108 - ISA Server detected a spoof attack..
- Index(es):
Relevant Pages
|