Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

How many public IP addresses can be put into the WAN on the ISA Serve 1

Status
Not open for further replies.

ftoddt

Technical User
Apr 26, 2003
180
US
I have an server and web server that already have routable IP numbers assigned to them. I wish to put them behind the ISA. It looks like I can just add the IP addresses to the ISA WAN Nic card before I run the appropriate wizard so I can select which IP listens. Does that sound correct?
 
It looks like I can just add the IP addresses to the ISA WAN Nic card before I run the appropriate wizard so I can select which IP listens. Does that sound correct? ....yes thats correct..just add an alternative ip address to your nic or add another nic card to your server.

Thanks, PAUL

 
Thanks Paul,
I did a little experimenting and it works just fine. Was hoping it stopped a email relay spamming problem I am having but no luck so far. I think I have it narrowed to an email virus.
Todd
Star for you thanks
 
Todd..more than likely u have a user name and pass that someone has compormised. have all the users change there passwords and enable smtp logging.

Thanks, PAUL

 
Thanks Paul,
How does one enable smtp logging... ? I don't have my reference books with me. My IT stuff is strictly part-time due to they can't get anyone else to stay for very long. I am at my regular job for the next 4 days.
Todd
 
Go to exchange manager expand servers, expand protocols, expand smtp, right clien default smtp virtual server go to properties, and on the bottom hit enable logging.

Thanks, PAUL

 
Paul,
How does one view the log once it is enabled....
Todd
 
Paul,
I had earlier accepted the defaul enable logging of "Microsoft IIS Log File Format". The logs open easily with notepad but I am unclear as to what I am looking at. I see a lot of mail going this way and that but I am not sure what it looks like when one has logged into the SMTP and that is what I need to look at in order to determine what passwords may have been compromised. I saw a lot of relay related messages. Could you give me a one line example of what a login would look like.
Todd
 
Paul,
Quick Question. Not all the users in our domain have email accounts. Do I still need to change all users passwords or just those with exchange accounts..??
Todd
 
change them all..do u have a wireless connection? or do u allow a vpn connection to your network? somewere there is a point of entry. set up logs for your vpn connection. if your are seeing a lot of activity in your current connection folder under smtp in exchagne then install something like etherreal or network monitor and monitor packet activity. if you have norton symantec start a virus sweep.

Thanks, PAUL

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top