Re: OH BOY - NEED SOME HELP!

From: Vanguard (no_email)
Date: 11/10/04 

Date: Wed, 10 Nov 2004 01:20:44 -0600

"BEEF_WELLINGTON" <BEEFWELLINGTON@discussions.microsoft.com> wrote in
message news:C8130E52-6CA6-4C60-A750-8CCF2DB46A7F@microsoft.com...
> Can any one tell me what this looks like? Are you thinking what I am
> thinking? Any thoughts are appreciated?
> ENVIROMENT
> SERVER:NT 4.0 6A
> PROXY 2.0
> Exhange 5.5 SP4
> Antigen Virus Software
>
> Here is a snapshot from a PF proxy log. I have changed the internal
> and
> gateway ip addresses for security reasons. Just imaging tat
> 111.111.111.11
> is the internal address of the NT server in question, and
> 100.100.100.10 is
> internet gateway address. I am seeing this occur periodically. Also,
> our
> proxy suddenly crashes, and brings down all the services, thus
> preventing any
> Internet Access. I have to start the services again. My servers have
> all MS
> Updates.
>
> 11/2/04, 3:21:37, 111.111.111.11, 198.41.0.4, Udp, 53, 53, -, 0,
> 100.100.100.10, -, -,
> 11/2/04, 3:21:37, 111.111.111.11, 198.41.0.4, Udp, 53, 53, -, 0,
> 100.100.100.10, -, -,

<snip>

You mean those dumb users haven't memorized the IP addresses for all of
your internal hosts and for every Internet site? They are so brain dead
as to still use human-readable IP *names* (that require a DNS lookup)?
Boy, that's weird that they haven't memorized, for example,
198.175.96.33 instead of using www.intel.com.

Sorry, although I can read minds, yours is way too scrambled to get a
good reading (hmm, I'm getting this collage of images of you in a field
rolling yourself into a blanket of dough and with amorous geese chasing
cows ... oh, that's your moniker, sorry). So, no, we don't know what
you are thinking because YOU NEVER TOLD US. Duh!

Relevant Pages

  • Re: ISA Server Problems, please help
    ... Based on the rules you have listed, SecureNAT clients should only be allowed ... The All access rule for SBS Internet Users ... Web Proxy and/or Firewall Client ... > header to the publishing server instead of the actual one. ...
    (microsoft.public.windows.server.sbs)
  • [NT] Flaw in Winsock Proxy Service and ISA Firewall Service Can Cause Denial of Service
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Acceleration Server 2000 contain support for Windows Sockets ... proxy communications. ... communications requests for Internet applications in a Microsoft Windows ...
    (Securiteam)
  • Poor client web browsing performance
    ... I've switched all our users from an old proxy 2.0 server to ISA 2004, ... That DNS server is configured with the ISA server's internal NIC ... The first firewall policy rule is called "unrestricted internet ...
    (microsoft.public.isa.configuration)
  • Re: Re: Hi Everyone,Just an update, the above registry import worked for a while but
    ... Exactly the same issue and the AT command to edit the LOCAL SYSTEM's internet settings with inetcpl.cpl did the trick. ... changed a our proxy server and this particular program installed on Windows ... Server 2003 Service Pack 2 server will not connect to the internet to check ...
    (microsoft.public.windows.server.general)
  • Re: wifi public access
    ... All connections coming to the Internet would be ... you would then forward to squid to proxy to the Internet, ... etc and sit between the WIFI zones and the proxy server allowing ... >You could propably query your radius server and fetch all the MACs ...
    (freebsd-isp)