Re: Internet slowdown. Is ISA being spoofed...

Tech-Archive recommends: Fix windows errors by optimizing your registry

Thanks Jim, false positives... Shall give it a read.

What concerning me more is the slow down the network is getting to the
external (internet). Plus the rapidshare thing has got my head scratching as
if it's being poxy spoofed it's slow everything down so how do I detect and
stop it!!

"Jim Behning SBS MVP" wrote:

There is an article by JimH about the port scan is a 99.99xx% false
report. What happens is connection shutdown in a way that confuses ISA
and ISA give a false port scan report. Forget my summary and read his
article.
http://technet.microsoft.com/en-us/library/cc512655.aspx

On Tue, 17 Jun 2008 03:40:02 -0700, ck <ck@xxxxxxxxxxxxxxxxxxxxxxxxx>
wrote:

SBS2003 R2 Premium
ISA2004 SP3
BT2700 router

I've a bit confused on this, been getting some Internet slowdown. :(

However, I just so happened to be on rapidshare.com to downloading a file
and noticed it keep stating that either the connection had exceeded it limit
or IP was currently downloading a file.

Except the IP address it gave me is one that appears in the routers Primary
Domain Name Server 194.xx.x.xx!!


Is there something open on ISA configuration or miss configured on my router
to be allowing this.


If I check rapidshare.com again when the IP address appears or before it
appears would running ISA logging show what


Under my alerts in ISA2004 I'm seeing 'ISA Server detected al all port scan
attack from IP: 66.102.1.103, 64.233.169.99 and connection exceeded for one
of my machines. If I run ISA's loggin would should I look out for?


How is this IP address being spoofed there isn't much I have changed from
ISA configuration on IC wizard.


Any troubleshooting help is appreciated. :)
See what SBS support is working on
http://blogs.technet.com/sbs/default.aspx
Check your SBS with the SBS Best Practices Analyzer
http://blogs.technet.com/sbs/archive/tags/BPA/default.aspx

.

Relevant Pages

  • Re: RWW - Cant login
    ... Premium and ISA. ... In the Microsoft Internet Security and Acceleration Server 2004 ... In the center pane, find a policy named SBS Internet Access Rule, ...
    (microsoft.public.windows.server.sbs)
  • RE: Group Policy - Restrict Internet Access by OU?
    ... you could not find ISA on SBS 2003, you can use SBS premium technology disk ... to install ISA server. ... restrict internet access on special user group. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cannot access website from Internet after installing ISA 2004
    ... > Thanks for using the SBS newsgroup! ... > the web site from internet after upgraded to ISA 2004. ... What is the error message you got when you access the web site? ...
    (microsoft.public.windows.server.sbs)
  • Re: FTP through ISA 2004
    ... As Jim says ISA 2004 allows very granular control over outbound access to ... FTP clients. ... internet access except to certain web sites. ... rule just above the SBS Internet Access Rule. ...
    (microsoft.public.windows.server.sbs)
  • RE: Cannot access website from Internet after installing ISA 2004
    ... Thanks for using the SBS newsgroup! ... the web site from internet after upgraded to ISA 2004. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)