master browser messages in evenlog on firewalled machine

From: Andy Fish (ajfish_at_blueyonder.co.uk)
Date: 03/24/05


Date: Thu, 24 Mar 2005 10:45:55 -0000

Hi,

I have a hosted server that was set up by the hosting company (uk2) to use
the local security settings as a firewall (in the "local security settings"
console, select "IP security policies on local computer"). This performs
packet filtering on incoming and outgoing IP packets. I have configured it
to allow only the things I need (incoming HTTP and Remote Desktop, outgoing
SMTP and DNS) and it seems to be working OK.

However, I have noticed messages in the event log like this:

"The master browser has received a server announcement from the computer
SERVER_XXXX that believes that it is the master browser for the domain..."

The server names in the event log are those typically assigned by the
hosting provider, so I guess these other servers are in the same hosting
centre (on the same network segment?). However, What I don't understand is
how it is receiving announcements from machines over tcp/ip (this is the
only network protocol installed) when the IP security policy is supposed to
be filtering the traffic.

It seems to me that either the packet filtering is implicitly letting
through some packets regardless of how it is configured, or that the
communication is not taking place over TCP/IP. Can anyone explain this
please?

Andy



Relevant Pages

  • master browser messages in evenlog on firewalled machine
    ... I have a hosted server that was set up by the hosting company to use ... the local security settings as a firewall (in the "local security settings" ... It seems to me that either the packet filtering is implicitly letting ...
    (microsoft.public.windows.server.networking)
  • Re: Courtyard arrangement - Jeff Middleton
    ... can do with ISA server publishing and how we interpret the idea of ... Microsoft MVPs ... SBS and hosting ... website or if we just had an ISP for the site, ...
    (microsoft.public.windows.server.sbs)
  • Re: Urgent: Problem setting up web site hosting on SBS03 with ISA
    ... On the other side of the coin, perhaps we can also stipulate that many of these issues can be mitigated by a knowledgable administrator who has the skill and experience to properly configure all aspects of the server. ... port 80 as opposed to the other avenues of attack that SBS presents on the external network, inparticular those that also rely on IIS for their core functions. ... Unless new vulnerabilities in IIS are discovered, hosting static HTML pages is probably fairly safe. ... Its database is kept synchronised to a master Access/SQL database on the customer's premises by means of email. ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Change
    ... If DYNdns.org is handling your External DNS, have them change this to your new IP of the website. ... >> server has a dynamic IP. ... >>> All you need to do is rent space on a ISP hosting service and FTP ...
    (microsoft.public.backoffice.smallbiz)
  • Re: companyweb - Sharepoint services
    ... Public website hosting implies that you would have to open port 80 to the Internet which is vulnerable to hack attacks. ... There are other options, if the budget exist ) to have a separate server in a DMZ zone, and host the public site there. ... Small Business Server 2003 and reinstall the Monitoring component. ...
    (microsoft.public.windows.server.sbs)