master browser messages in evenlog on firewalled machine
From: Andy Fish (ajfish_at_blueyonder.co.uk)
Date: 03/24/05
- Next message: anonymous_at_discussions.microsoft.com: "Re: Has my DC been hacked?"
- Previous message: achen: "Weird security problem in my WIn2K domain"
- Next in thread: Roger Abell: "Re: master browser messages in evenlog on firewalled machine"
- Reply: Roger Abell: "Re: master browser messages in evenlog on firewalled machine"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 24 Mar 2005 10:45:55 -0000
Hi,
I have a hosted server that was set up by the hosting company (uk2) to use
the local security settings as a firewall (in the "local security settings"
console, select "IP security policies on local computer"). This performs
packet filtering on incoming and outgoing IP packets. I have configured it
to allow only the things I need (incoming HTTP and Remote Desktop, outgoing
SMTP and DNS) and it seems to be working OK.
However, I have noticed messages in the event log like this:
"The master browser has received a server announcement from the computer
SERVER_XXXX that believes that it is the master browser for the domain..."
The server names in the event log are those typically assigned by the
hosting provider, so I guess these other servers are in the same hosting
centre (on the same network segment?). However, What I don't understand is
how it is receiving announcements from machines over tcp/ip (this is the
only network protocol installed) when the IP security policy is supposed to
be filtering the traffic.
It seems to me that either the packet filtering is implicitly letting
through some packets regardless of how it is configured, or that the
communication is not taking place over TCP/IP. Can anyone explain this
please?
Andy
- Next message: anonymous_at_discussions.microsoft.com: "Re: Has my DC been hacked?"
- Previous message: achen: "Weird security problem in my WIn2K domain"
- Next in thread: Roger Abell: "Re: master browser messages in evenlog on firewalled machine"
- Reply: Roger Abell: "Re: master browser messages in evenlog on firewalled machine"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|