Re: Event 15108 - ISA Server detected a spoof attack..



Hi Dev,

Thanks for your suggestions.

1 - Disable Netbios on external NIC : Already configured that way

2 - File and printer sharing is already disabled. Only TCPIP is selected on
External NIC, and Netmon Network Packet Driver.

3 - Under TCPIP Properties/Advances/DNS tab - the Internal NIC is set to
"Register this connections address in DNS" - How can I check if it's trying
to register with external DNS? (I assume you mean external DNS = ISP DNS
server?)

3b - "Put the external DNS servers to internal DNS forwarders." - I'm not
sure what you mean by this exactly. Are you saying the external (ISP) DNS
servers should be manually entered in to SBS's own DNS records?

Thanks,

Mark


"DEV" <devrawat2@xxxxxxxxx> wrote in message
news:1157676462.198615.297890@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Hi ,

One morething I forgot ,

Remove WINS server from the card properties.

Regards

DEV
Microsoft EPS

DEV wrote:
Disable NetBIOS on the External ISA NIC so that it should not register
in the Internal DNS.
Uncheck file and printer sharing on the external card
Set the internal NIC to no longer register with any external DNS and
put the external DNS servers to internal DNS forwarders.
Restart all the ISA services.

Error message should stop.. if not lemme know..Will provide you with
some more steps

Regards,

DEV
Microsoft EPS



.



Relevant Pages

  • Issues migrating SBS 2003 domain to Server 2008 Standard
    ... We are stuck migrating our SBS 2003 domain to Server 2008. ... Fatal Error:DsGetDcName (SRV-EXCH) call failed, ... Verify your Domain Name Sysytem (DNS) is ... network connectivity to a domain controller. ...
    (microsoft.public.windows.server.sbs)
  • Re: AD management snap in cannot find DC (netdiag /v workstation)
    ... The name.local entries are used by my apache server to implement ... change button, more button, the "Primary DNS suffix of this ... Attr: subschemaSubentry ... Owner of the binding path: ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD management snap in cannot find DC (netdiag /v workstation)
    ... button, more button, the "Primary DNS suffix of this computer", it should ... The Security System could not establish a secured connection with the server ... Attr: subschemaSubentry ... Owner of the binding path: ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD management snap in cannot find DC (netdiag /v workstation)
    ... DNS Host Name: tonyb-pc.imageproc.imageproc.com ... Testing IpConfig - pinging the DHCP Server... ... Attr: subschemaSubentry ... Owner of the binding path: ...
    (microsoft.public.windows.server.active_directory)
  • Re: Issues migrating SBS 2003 domain to Server 2008 Standard
    ... Since you have migrated to standard server 2008 you would be better served posting in a Standard server NG. ... Event String: ... Verify your Domain Name Sysytem (DNS) is ... network connectivity to a domain controller. ...
    (microsoft.public.windows.server.sbs)