ISA log question

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ smallbiz
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Forwarding Exchange email I want to forward a user's email to two other users. When I go into AD - Users - Exchange General - Delivery Options, I only have the option of forwarding mail to a single user. What's the best way to forward mail to multiple people? I'm running SBS 2000. Thanks for the help! Tag: ISA log question Tag: 167502
  - 2
    - Javier's - Exchange AD filtering I read Javiers suggestion on using Exchange AD filtering to get rid of spam (not blocking NDRs) at: http://msmvps.com/javier/archive/2004/10/27/16828.aspx Is this only for SBS2003? I'm running SBS2000 and don't see the setting under filtering. Am I missing something? I only had 3 options to enable, none being the one mentioned in the article. If it doesn't work for Exchange 2000 any other ideas. We get (as probably with everyone else) tons of NDRs daily. Thanks Tag: ISA log question Tag: 167494
  - 3
    - =?iso-8859-1?Q?SBS2003_Installation_-_Exchange_Server_2003_Outgoing_SMTP_?= I am having a problem with a new SBS2003 Installation - Exchange Server 2003 Outgoing SMTP Queue Desacription of Problem: Outgoing SMTP Internet Email is stuck in queue with status of retry - NDR after time out - message "the remote server did not respond to a connection attempt" Incoming SMTP Internet Email received normally Currently using DNS for mail delivery - if reconfigured to forward to external host, the queue clears. DNS name resolution from the command prompt or IE to external domains resolve with no problem A query from the firewall produces the following results- the same is true from a filtered domain subnet external to the firewall to the live IP address at the router. firewall:~# telnet 192.168.16.2 25 Trying 192.168.16.2... Connected to 192.168.16.2. Escape character is '^]'. 220 Domain.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.211 ready at Tue, 9 Nov 2004 19:17:04 -0800 EHLO 250-Domain.com Hello [192.168.16.1] 250-TURN 250-SIZE 250-ETRN 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-8bitmime 250-BINARYMIME 250-CHUNKING 250-VRFY 250-X-EXPS GSSAPI NTLM LOGIN 250-X-EXPS=LOGIN 250-AUTH GSSAPI NTLM LOGIN 250-AUTH=LOGIN 250-X-LINK2STATE 250-XEXCH50 250 OK - the only difference with this installation and the last 12 since 06/2004 is the application of Current Hot Fixes and Exchange 2003 SP1 plus Hot Fixes prior to installation All Installation procedures are documented and followed consistently with no exceptions - no errors during installation documented I am under the gun on this one, since the problem was not discovered until the system went live. I will appreciate any help. I have compared the settings of the other installations with this one and the only differnece I find is not with the configuration, but the version of files. I have looked at Exch 2000 KB with no luck. Tag: ISA log question Tag: 167493
  - 4
    - OWA I can't seem to get OWA working. I had it working internally but after trying to fix the permissions from the outside, I can't get it to work at all. The same goes for OMA and Active Sync. I have 2 other websites on the server that are accessible from the internet. P.S. I'm not using ISA server for the internal PCs. Tag: ISA log question Tag: 167481
  - 5
    - Receive Outlook Mail Hi there, I have a client with SBS2K and Exchange 2K setup and the Outlook Client seems to check itself on opening but then after that it doesn't appear to check the server itself for new mail rather you have to click send and recieve. The desktop pc's use Outlook 2000. Is there a way to change this to auto check (yes Outlook is left open all day). Also when an email is prepared and an email address is inserted that system automatically changes it to a blue colour and changes the font size of the whole email address. How can I stop it from automatically changing things? Also I want to control the APC Smart UPS 1000 from Windows so that it will shutdown safely. The bundled software doesn't seem to do it very well. Which utility should I use that comes with Windows and will it run automatically? Many thanks for all your help, Sam. Tag: ISA log question Tag: 167479
  - 6
    - Group Policy Questions I am trying to setup Group Policy on our SBS 2000 machine. The main reason why we are doing this is to roll out a DSN registry key for an ODBC System DSN. I have opened up AD, right-clicked>Properties and I can see in there a Group Policy tab and in there listed Default Domain Policy. I have added a new GP called "company policy" with no overide ticked. Questions... 1. Now, how do I apply this policy to a user or machine? 2. Can I add a key in there for a registry update on clients? 3. Can I add an ODBC System DSN to be updated on the clients? skc Tag: ISA log question Tag: 167477
  - 7
    - SBS login script to run a VBS file? I want a login script to run a vbs file for DSN rollout: http://www.databasejournal.com/features/mssql/article.php/2238221 How do I do this? Skc Tag: ISA log question Tag: 167475
  - 8
    - NDR is not working! Hi, We are running SBS2000 with Exch2kSP3. We have around 40 mailboxes setup to be <firstname>@domain.com, where we pick up POP3 from our ISP and download mail into our SBS box via GFI MEss. If I send an email to our domain that is not configured as an SMTP in the mailboxes, e.g. elephant@domain.com, then GFI Mess picks it up as processed OK, but where does it go? There is not a mailbox existant for this person called elephant - so where does it go? I was looking at newsgroups and added in the Default SMTP Virtual Server>Properties, Messages tab, Send copy of non-del reports to and put my email address in there (administrator) as my name@domain.local. Is this correct? I need help!!! I sent some test messages to our domain name for non-existant recipients and I am not getting an NDR back in my yahoo webmail account! skc Tag: ISA log question Tag: 167474
  - 9
    - Routing and remote access Hi, I have an SBS 2000 server which for some reason stops talking to the internet as soon as I try to configure routing and remote access to allow remote users to connect via VPN. I have re-run the CEICW and checked the bindings in the advanced option for the network settings. I have two NICS and ISA installed and then also a firewall/router running on the WAN connection. I have run through Microsofts articles on making sure that SBS is configured correctly for 2 NIC's. For some reason the clients are also having some trouble (with or without the Routing and Remote access configured) with data speed accross the network being very slow. (if I copy the data locally and try to open it is very quick, from the server, veerrryyy sllloowww.??!!?? Sounded like Bindings problem and or DNS/WINS problem to me but cant find any faults there. No errors in event logs...................... Client PC's are Windows XP Pro running SP2 with all the latest updates on server and clients. Any help with the network speed and RRAS would be greatly appreciated TIA Terry Tag: ISA log question Tag: 167473
  - 10
    - TS access only 2 users? Hi One of my customer is using VPN remote access, it works pretty well. An additional remote user needs to access the server & use TS to run an application. The application software writer has set up a new remote user, but by using active directoty, not the SBS user wizard. (Despite my instructions to always use the wizards). It seems that after about a week, this user is losing their TS desktop settings & it has to be set up again. Is this normal? Also it appears that TS will only handle 2 users at once. Is this correct? Regards Nick Tag: ISA log question Tag: 167472
  - 11
    - Email I sent an email to a non-existant email account and I have not had an undeliverable. How do I check where this email is - as it has come into us somewhere? We are running SBS2000 with Exch2000 SP3. We collect emails via POP3 using GFI MailEssentials. Thanks skc Tag: ISA log question Tag: 167471
  - 12
    - Copy and fwd outgoing emails within exchange I need to be able to configure exchange to have emails FROM User 1 to be copied and fwd to User 2 or User 3 other than using Outlook rules, as the destination user often changes, and the outlook client's laptop is often not available. Tag: ISA log question Tag: 167469
  - 13
    - SQL & Exchange Take it to the ring Hello all, one of my clients has recently been provided with a new version of the Financial Planning software, which uses SQL server rather than the server-side data files. Previously we have never had any issues with memory, but we are finding that the system is becoming slower & slower, and is starting to drop connections to other third party applications, which utilise fox-pro databases. The current config is: Dell Poweredge 2500 P3 800 x 1 1024Mb Ram (4x256) 3 x 32 Gb SCSI Raid 5 My question is to find out what the most effective solution may be from the following: 1. Somehow limit the memory allocation of the SQL database. 2. Throw another 1024 (2 x 512) Memory into the box 3. Change over the CPU to a faster 1.4Ghz (What issues can I expect with this option) Thanks in advance. Tag: ISA log question Tag: 167465
  - 14
    - Vpn connection outbound from workstation Hello all. setup sbs 2000 all patched up except for the new Isa patch. Workstation admin rights win2k. Laptop winxp I want to connect to another office that has enabled vpn. I tried the connection from home and it works. In the office isa server, and netgear router. Inbound port open is https only. I can't establish an outbound vpn connection it gives an error instantly. Since I'm connecting to someone else I don't have to open any ports????? Need some help here.. Thank you -- end Tag: ISA log question Tag: 167464
  - 15
    - 2003 Terminal Server Hi there, Anyone have any how-to's or good links relating to integrating a Windows 2003 server in Terminal Services mode in an existing SBS2000 network. The existing Windows 2000 member server in a client's SBS 2000 network has been replaced with a Windows 2K3 Terminal server and things just aren't working as well as they used to with the old TS2000 server. thanks TR Tag: ISA log question Tag: 167461
  - 16
    - domain controller problem Workstations cannot log on to SBS 2K server. dcdiag produces ERROR: Starting test: NetLogons [AMNSRV1] An net use or LsaPolicy operation failed with error 67, The n etwork name cannot be found.. ......................... AMNSRV1 failed test NetLogons Starting test: MachineAccount Could not open pipe with [AMNSRV1]:failed with 67: The network name can not be found. Could not get NetBIOSDomainName Failed can not test for HOST SPN Failed can not test for HOST SPN * Missing SPN :(null) * Missing SPN :(null) ......................... AMNSRV1 failed test MachineAccount Starting test: Services Could not open Remote ipc to [AMNSRV1]:failed with 67: The network name cannot be found. ......................... AMNSRV1 failed test Services Tag: ISA log question Tag: 167453
  - 17
    - 2 questions for SBS 2003 Is there any harm having a 2003 server and running it as a 2nd DC? I have SBS premium, but it has ISA 2000 and I want to use ISA 2004. Are there any known issues using ISA 2004 on another box? Thanks Tag: ISA log question Tag: 167450
  - 18
    - VPN setup on SBS2003 Can some one advise on how to setup VPN on our SBS2003. Objective: Home users should be able to access the folders on the SBS2003 located in the office. The home users are equipped with XP Laptops and an ISP connection via Cable or DSL services providers. SBS2003: This server's NIC is assigned 192.168.x.y and this server is also connected to DSL router provided by "Speakeasy". They have given us a static IP 68.236.c.d The question is what are the steps I should take to acheive the above objective. I have gone through www.smallbizserver.net but not much of help. It says,I should use ISA Management snap in to enable the VPN. I did not find such snap-in on my SBS2003. Any help is appreciated. Tag: ISA log question Tag: 167440
  - 19
    - KYSBSUG November Meeting (11/17/2004) You are cordially invited to attend the November meeting of the Kentucky Small Business Server User Group (KYSBSUG)! http://www.kysbsug.org Click here to register to attend here (FREE!): http://www.clicktoattend.com/invitation.aspx?code=100821 Date: Wednesday November 17, 2004 Time: 6:00 pm - 8:00 pm Eastern (GMT -5) Cost: Admission, parking, and refreshments are FREE! Location: University of Louisville - Shelby Campus Building: Information Technology Resource Center (iTRC) Room: Large conference room Address: 9001 Shelbyville Road City/State/Zip: Louisville, KY 40222 Contact: Tim Barrett timbarrett@rehabdesigns.com Agenda: 6:00 - 6:30 - Networking 6:30 - 7:00 - Meeting starts - SBS News Events, Orientation for new members RSS presentation 7:00 - 7:45 - Featured speaker: Brad Billison (Microsoft Partner Technology Specialist) - Windows Roadmap 7:45 - 8:00 - Wrap-up give-aways We have plenty of room, so be sure to invite anyone interested in Microsoft Small Business Server! IMPORTANT - This is a secure building, so please try to arrive no later than 6:30 PM E.D.T. to be sure you can get in the building. E-mail Tim Barrett at timbarrett@rehabdesigns.com or call (502) 266-9061 x105 with any questions. Campus Map: http://www.theitrc.com/html/shelby_campus.html Expedia Map: http://tinyurl.com/2meg5 Directions to the U of L Shelby Campus - iTRC: (The Shelby Campus is in the EAST end of Louisville, one block West of Hurstbourne Lane) From the Airport: Take I-264 East (Watterson Expressway) out of the airport for approximately 6 miles. Once you pass the I-64 interchange, look for US 60 (Shelbyville Road) which is the St. Matthews/Middletown exit. Go East towards Middletown for approximately 1 mile through a commercial, and then residential, area. Shelby Campus will be on your left. From I-64: I-64 West into Louisville to the Jeffersontown/Middletown exit #15 which is Hurstbourne Lane (State Road 1727). At the end of the ramp, turn right towards Middletown. Stay on Hurstbourne to US 60 (Shelbyville Road) which is approximately 1 mile. Turn left onto US 60. Shelby Campus is on your right just past the first red light. From I-65: I-65 North into Louisville to I-264 East (Watterson Expressway). Go approximately 6 miles to US 60 (Shelbyville Road) at the St. Matthews/Middletown exit (which is just past the I-64 interchange). Go East towards Middletown for approximately 1 mile through a commercial, and then residential, area. Shelby Campus will be on your left. From I-71: I-71 South into Louisville to I-264 West (Watterson Expressway). Go approximately 2 miles to the US 60 (Shelbyville Road) at the St. Matthews/Middletown exit. Go East towards Middletown for approximately 1 mile through a commercial, and then residential, area. Shelby Campus will be on your left. -Tim Barrett Kentucky Small Business Server User Group (KYSBSUG) http://www.kysbsug.org Operations Manager Rehab Designs, Inc. Website: http://www.rehabdesigns.com E-mail: timbarrett@rehabdesigns.com Office: (502) 266-9061 x105 Fax: (502) 266-6251 Cell: (502) 817-3456 Protect your PC http://www.microsoft.com/protect Tag: ISA log question Tag: 167437
  - 20
    - SBS machine slowing down.... I have noticed our Windows 2000 Small Business Server slowing down over time. Today I took a look at the task manager and noticed that out of 1GB RAM, it was running with only 28mb RAM remaining.... When I dug into the issue a bit more I noticed a process called STORE.EXE sitting at 734mb RAM. Why is this process taking up so much RAM? I have been planning on adding RAM to this machine and I guess I need to do it soon. I will also reboot to see if some can be reclaimed. I just want to know why this gets so large, and what I can do to minimize it? Thanks, Brad Tag: ISA log question Tag: 167431
  - 21
    - can not locate domain I have a customer trying to connect some workstations in a sbs2k environment. We receive a cannot find domain error. domain name is correctly typed. domain admin account used to try to create an account. IP protocol seems to be working fine. Can ping, server and other computers. What to try next? What protocol, etc is used to establish this connection? Can it be corrupted kinda like winsock does so often on xp? Tag: ISA log question Tag: 167429
  - 22
    - Exchange 2000 in SBS 2000 Dear all, Just wondered if anyone could help me... I want to remove all Exchange features from SBS 2000 without causing any damage to the operating system, how do i go about this? Regards, Alex Saager Tag: ISA log question Tag: 167425
  - 23
    - SBS 2k How do i remove all exchange features from SBS 2k without causing any damage to the operating system? Regards, Alex Saager Tag: ISA log question Tag: 167424
  - 24
    - Applied Security Patches, Now No Remote Desktop Hello, Last night I applied the following patches: Microsoft Security Bulletin MS04-037 Vulnerability in Windows Shell Could Allow Remote Code Execution (841356) Microsoft Security Bulletin MS04-036 Vulnerability in NNTP Could Allow Remote Code Execution (883935) Microsoft Security Bulletin MS04-032 Security Update for Microsoft Windows (840987) Microsoft Security Bulletin MS04-031 Vulnerability in NetDDE Could Allow Remote Code Execution (841533) Microsoft Security Bulletin MS04-030 Vulnerability in WebDAV XML Message Handler Could Lead to a Denial of Service (824151) This morning I am unable to make a Remote Desktop Connection. From home, I am able to connect to VPN, but no Remote Desktop. At the office, on the LAN, no Remote Desktop either. The error message is: Remote Desktop Disconnected: The Client could not connect to the remote computer. REmote connections might not be enabled or the computer might be too busy to accept new connections. It is also possible that network problems are preventing your connection. Please try connecting again later. If the problem continues to occur, contact your administrator. At the server, Terminal Services service is running. What else can I check? Many thanks!! Matthew Tag: ISA log question Tag: 167423
  - 25
    - WAPS and SBS I do more and more troubleshooting remotely from coffee shops. What's the risk of using terminal services or remote desktop management from wireless networks at coffe shops. Not worried too much about my laptop on the WAP, I'm worried more about logging into the SBS servers and the password and logon name getting sniffed out. Tag: ISA log question Tag: 167421
- Next
  - 1
    - shared fax service stops On my 2000 SBS server the shared fax service intermitently stops. I can turn it back on and it will turn back off in a couple of minutes. All of the other services that it depends on are working. Some times it runs all day without a problem and then the next thing I know it doesn't. It worked fine for about a year or two and just recently started this. Can someone help me with this. Someone said they had the answer posted at microsft.public.backoffice.smallbiz but I can't find it. Thanks, Mike Tag: ISA log question Tag: 167420
  - 2
    - shared fax service stops On my 2000 SBS server the shared fax service intermitently stops. I can turn it back on and it will turn back off in a couple of minutes. All of the other services that it depends on are working. Some times it runs all day without a problem and then the next thing I know it doesn't. It worked fine for about a year or two and just recently started this. Can someone help me with this. Someone said they had the answer posted at microsft.public.backoffice.smallbiz but I can't find it. Thanks, Mike Tag: ISA log question Tag: 167419
  - 3
    - shared fax service stopping On my 2000 SBS with all updates applied the shared fax service has been stopping. You can manually turn it on and then it will turn back off in a few minutes. To make it harder to fix it happens intermitently. I know this has been posted before and I saw where one guy says to go to microsoft.public.backoffice.smallbiz for the answer but I can't find that. Can someone tell how to fix this please? Thanks, Mike Markos Tag: ISA log question Tag: 167418
  - 4
    - problem with CHKDSK on SBS2000 Hello. Looking or a little help... My customer is running SBS2000. Everything HAD been running fine with the server for a long time (3+ years). There server has a five SCSI hard disk drives in a hardware RAID 5 (4 drives int he RAID array, plus a hot spare). Today, they started having problems with their database program - which uses SQL Server. Rebooting the server fixed the problem for a little while, but then the problem returned again. While troubleshooting the SQL problem with the Tech Support staff of that software vendor, they noticed a single a single instance of the following error in the event log: ========================================== Event Type: Error Event Source: Ntfs Event Category: Disk Event ID: 55 Date: 11/7/2004 Time: 4:19:59 AM User: N/A Computer: NTSERVER1 Description: The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:. Data: 0000: 00 00 00 00 02 00 4e 00 ......N. 0008: 02 00 00 00 37 00 04 c0 ....7..À 0010: 00 00 00 00 32 00 00 c0 ....2..À 0018: 18 00 00 00 00 00 00 00 ........ 0020: 00 00 00 00 00 00 00 00 ........ ========================================== We ran CHKDSK (with /F parameter). It got to 43% complete on stage 4 of 5, and just hung there. We waited for more than 2 hours. The hard disk drives continued to thrash like crazy, but no change in the percent complete. We called Microsoft Support, and opened case number SRX041108607622. We waited another 1-2 hours, but there was still no change in percent complete. After 3+ hours of waiting, the MS Support Engineer had us reboot the server. The server booted okay into Windows. (Thank God!). We then rebooted the SBS2000 server using the recovery console, and ran CHKDSK from the recovery console. It went smoothly to 60% complete, and then just hung (no "stages" shown when running the CHKDSK from the recovery console.) After waiting 15+ minutes and there being no change in percent complete, the MS Support Engineer had us reboot the server. The server booted okay into Windows. We confirmed that no errors are shown in the RAID software - all of the drives are online and healthy,with zero errors reported. We are going to wait until the staff starts working again in the morning, to see if SQL Server runs okay,or if the errors start again. We are pretty sure that the Tech Support staff for the database program is going to wash there hands of helping until we can get CHKDSK to complete. The MS Support Engineer was telling us the next step would be to format the c-partition, reinstall Windows and restore from a prior tape backup ( we have Veritas Backup Exec running). Before we did that, I thought I would check with the Newsgroup and see if anyone had any ideas for how to get CHKDSK to complete. Any ideas/suggestions? Thanks. Lloyd Wolf Wolf Consulting, Inc. Tag: ISA log question Tag: 167406
  - 5
    - Increase C partion Hello, I am running SBS 2000. My current C: partition is only 4 GB and I'm about out of space. How can I increase the drive space and avoid a reinstall? Any advise would be appreciated. Tag: ISA log question Tag: 167404
  - 6
    - back up restore active directory and exchange I will be reloading out server due to a number of problems and need some assistance in making sure that I am able to backup and restore the active directory settings the MS exchange settings/data etc We are running a windows 2000 Small business server do i need to backup active directory or do i just need to setup the same users again and then they will pickup the exchange info you help would be appreciated Tag: ISA log question Tag: 167399
  - 7
    - Restoring Exchange We have a SBS box that we are shifting to a new box. We haven't used the migration wizard as we will be using the same domain. We have setup up the new box and entered all the users in. We want to transfer Exchange from the old on to the new one. What is the best way to do it? We were going to use Exmerge but the process was going to take too long. We have tried restoring the information store to the new box (everything is setup identical between the two boxes), but cannot reconnect the mailboxes (we get a C1038af7 error which we looked on Technet but it didn't resolve it). How would you do this restoration process? We want a process that takes minimal time and works fine! Matt Tag: ISA log question Tag: 167393
  - 8
    - Problems with POP3 Virtual server Hi Everyone Sometime ago I posted the following problem ---------------------------------------------------------- I seem to be having a problem getting my pop virtual server going. Our current configuration is SBS2003 static ip address, exchange server working great. I have run CEICW wizard several times to get my pop virtual server going, the reason we want that is for our website other issue where we need to use the our mail domain. If I run the wizard all seems to be ok, however when I go into Routing and remote and have a look at the External network properties for NAT, under services and ports the POP3 check box is unchecked, if I check it and hit ok and go back into see if it is checked it is unchecked again. I also notice in the Event Log under Services the following error Event Type: Error Event Source: ipnathlp Event Category: None Event ID: 32003 Date: 20/10/2004 Time: 9:58:40 AM User: N/A Computer: SERVER Description: The Network Address Translator (NAT) was unable to request an operation of the kernel-mode translation module. This may indicate misconfiguration, insufficient resources, or an internal error. The data is the error code. ------------------------------------- I have investigate microsoft Q293497 and admit at this stage really don't understand what it is all about. Everything in my network seems to work well and exchange mail is working great. Hope someone can help me thanks to everyone elses advice before but I am still not sure how to fix this problem, am getting desperate now !!! Tag: ISA log question Tag: 167390
  - 9
    - Constant DCOM 10004 Errors in Event Log (Not IWAM!) Hi, oh my god I hope someone can help! Here is the error message: DCOM got error "Logon failure: unknown user name or bad password. " and was unable to logon XXX\Administrator in order to run the server: {888FC943-CB7D-43E7-BB64-905342B0D34D} The GUID does NOT show up in regedit, regedt32, or general text searches of the ENTIRE server, with or without dashes. This message began after I changed the admin password on the server. It isn't any third party software, that's been checked. Does anyone have ANY ideas??? I'm totally spent on this, and they just keep coming, filling up the event log files, one every few minutes or so! Thank you, Rick Tag: ISA log question Tag: 167384
  - 10
    - Windows update to SP4 Tried to install the SP4 on a SBS2000 Box. After it starts inspecting the system it says a program has netstat open. Tried the norm stuff and nothings seems to work. Booted up in safe mode to rename and that does not work either. Any suggestions?? I have already installed SBS SP1 on this system. Danny Tag: ISA log question Tag: 167378
  - 11
    - Exchange Admin Tools I am implementing an Email solution that will allow receiving emails on cell phones sync with Exchange. I am using SBS 2000 and I am required to install just Exchange Admin tools on a SEPARATE server along with the software provided by the phone company. Since Exchange came bundled up in the SBS 2000 discs, does anybody have any idea how to go about extracting just the "Exchange Admin Tools" of one of those discs(If it is actually there? Thanks Tag: ISA log question Tag: 167377
  - 12
    - OTT Enterprise Spyware Hi Can anyone recommend any good Enterprise Spyware programs? Thanks Lewej Tag: ISA log question Tag: 167375
  - 13
    - STORE.EXE using all CPU I have a server running SBS2000 and some PCs running Windows 2000/XP and Outlook 2000. Several times recently I have experienced a problem with Exchange Server where if I send an email the message arrives in my Outbox but does not go and STORE.EXE uses a lot of CPU. I had exactly the same problem with another users a few weeks ago and resolved the problem by exporting the data using EXMERGE, deleting the mailbox, creating a new mailbox and importing the data again. I have tried it with my mailbox and it resolves the problem for a while but it comes back again. Can anybody suggest why this happens and how I can resolve this? Thanks David Tag: ISA log question Tag: 167372
  - 14
    - User accounts being deleted Hi all, hope you can help with this problem. We have a SBS2K sever with 40 client workstations attached. The clients are a mixture of win2k and XP. A few weeks back I noticed that users accounts on their workstations had been removed, meaning anything that required admin rights on their PC was denied to them. I reset these by logging onto each system as a local administrator and added the domain users and domain administrators account to each one, but over a period of a couple of days these accounts have been deleted with the exception of one windows XP machine. I have repeated this exercise several times, and each time the accounts disapeared, sometimes in minutes, somtimes taking a couple of days. It is not possible that someone is manualy removing these as I have witnessed this happening when no one else has access to the network. I have checked for viruses, spyware, and any unusual registry entries on server and clients. There is also nothing set in group policies. Any help would be much appreciated, this is driving me mad. Regards...... Andy Tag: ISA log question Tag: 167356
  - 15
    - XP and SP2 After installing SP2 on workstations running XP or new computers running XP that come with SP2 already installed, hereâ??s the problem. I can ping the server from the workstation but I canâ??t ping the workstation from the server. Any ideas? I had a similar problem where I couldnâ??t install Norton Anti-virus from the server to the workstation, it wouldnâ??t connect to the workstation and gave me the following error, â??cannot access admin$, contact system administratorâ??. Turned out I turned off the firewall settings in the local area connection settings on the workstation and it worked. I turned off the same settings in this case thinking it may help and still canâ??t ping the workstation. Tag: ISA log question Tag: 167354
  - 16
    - << SBS News of the week Nov 7th 2004>> Australia are you ready? http://www.wheresjeffnow.com/default.aspx http://www.microsoft.com/australia/partner/events/partnerbriefings/summit.aspx#anchor1 Jeff Middleton and the rest of the SBS MVP incredibles are coming to a city near you Perth Thursday 11th Nov 2004 Hyatt Regency Perth Hyatt Regency Perth 99 Adelaide Terrace Perth WA 6000 Adelaide Wednesday 17th Nov 2004 Adelaide Convention Centre Adelaide Convention Centre North Terrace Adelaide SA 5000 Sydney Tuesday 23rd Nov 2004 Sydney Convention Centre Sydney Convention & Exhibition Centre Darling Drive Darling Harbour Melbourne Wednesday 1st Dec 2004 Crown Towers - Melbourne Crown Towers 8 Whiteman Street Southbank VIC 3006 Brisbane Tuesday 7th Dec 2004 Brisbane Convention & Exhibition Centre Brisbane Convention & Exhibition Centre Cnr Merivale & Glenelg Streets South Brisbane QLD 4101 ---------------------- Javier does a song of the week news://msnews.microsoft.com/usS$4fOxEHA.3896@TK2MSFTNGP10.phx.gbl ----------------------- Security patch Tuesday PLEASE SEE THE NEWS STORY BELOW - MS OPENS UP ADVANCE NOTICE TO ALL] ISA server Important rating [not critical] Reboot needed --------------------- Chapter 1 and 2 of the Patch Management ebook now available By Anne Stanton and Susan Brdley https://www.ecora.com/ecora/jump/pm123.asp ---------------------- Blogs of interest Good catch Chad - found a SBS in a Windows server Wonder how many other "hidden" sbs machines there are out there installed. Dead Server Walking: http://msmvps.com/cgross/archive/2004/11/03/17826.aspx Javier and User groups http://msmvps.com/javier/archive/2004/11/07/18184.aspx Do you plan for your IT? http://msmvps.com/sbs/archive/2004/11/07/18203.aspx I hope everyone is following SeanDaniel.com's blog! http://seanda.blogspot.com/ Dr. J's article on how hackers enter your network http://blogs.msdn.com/brianjo/archive/2004/10/28/249159.aspx Mike Walsh's Sharepoint RSS http://mikeswss.blogg.de/eintrag.php?id=140 ----------------------- SMBnation SBS converence http://www.smbnation.com/smb_nation_summits.htm London November 10th ---------------------- In other news - - - - - - - - - - Microsoft to help users prep for patching Microsoft Corp. will give customers advance notice of its monthly security updates in an effort to help them prepare to install related software patches, the company announced today. Starting this month, Microsoft will publish on its Web site a summary of planned security bulletins three days before they are released in their entirety. http://computerworld.com/securitytopics/security/story/0,10801,97221,00.html Microsoft opens up corporate security bulletin to all http://www.theinquirer.net/?article=19472 Microsoft: Security requires teamwork http://news.zdnet.com/2100-1009_22-5439285.html - - - - - - - - - - Ex-Austin student indicted for data theft A federal grand jury on Wednesday indicted a former University of Texas at Austin student for breaking into the school's computers and stealing 37,000 names and social security numbers. The university estimated the data theft cost the school $167,000 to recover the system affected by the breach and warned people about potential identity theft. http://news.com.com/Ex-Austin+student+indicted+for+data+theft/2110-1029_3-5441013.html http://www.usatoday.com/tech/news/computersecurity/hacking/2004-11-05-ut-hack-charge_x.htm - - - - - - - - - - Bank accounts in online security scare British Internet bank Cahoot has plugged a flaw in its online security that could have enabled people to move freely in and out of other customers' accounts. Cahoot took the site down for 10 hours while it fixed the flaw, according to a representative for Abbey, Cahoot's parent financial institution. The problem was likely the result of an upgrade 12 days ago. http://news.zdnet.com/2100-1009_22-5440931.html http://news.zdnet.co.uk/internet/security/0,39020375,39172762,00.htm http://www.vnunet.com/news/1159191 Cisco, Wells Fargo face new security breaches http://computerworld.com/securitytopics/security/story/0,10801,97279,00.html A new, more sneaky phishing attack http://www.msnbc.msn.com/id/6416723/ - - - - - - - - - - Email worm poses as Osama videogram Emails claiming to contain video clips of terrorist mastermind Osama bin Laden are likely to be example of a new computer worm. The Famus-F worm normally arrives in the form of a bilingual English and Spanish email, with the subject line "More terrorism this year". The message body states: "Last speech from Bin Laden. Please forwards this video to everybody." http://www.theregister.co.uk/2004/11/05/osama_email_worm/ http://news.zdnet.co.uk/internet/security/0,39020375,39172757,00.htm http://www.vnunet.com/news/1159201 - - - - - - - - - - IE bug allows hackers to take over PCs Security watchdog the US Computer Emergency Readiness Team (US-Cert) has warned Internet Explorer (IE) users to update patches after it discovered a buffer overflow vulnerability that gives hackers local admin rights to execute arbitrary code on compromised PCs. http://www.vnunet.com/news/1159190 - - - - - - - - - - Virus writers elude Microsoft's bounty hunt Virus writers have a price on their heads--but it's done little to discourage them. In the year since Microsoft kicked off its Anti-Virus Reward Program, it has tallied only a single success. The program has offered $1 million to informants who help close official investigations into four major viruses and worms, and has another $4 million earmarked for future rewards, but the deluge of online threats has continued to swell. http://news.zdnet.com/2100-1009_22-5439456.html - - - - - - - - - - Fax.com barred from doing business in Idaho Idaho has won a court order permanently barring the advertising company Fax.com from doing business within the state. The Aliso Viejo, Calif.-based company is believed to be the largest volume ``fax-spammer'' in the nation, Idaho Attorney General Lawrence Wasden said Friday. http://www.siliconvalley.com/mld/siliconvalley/news/editorial/10110305.htm - - - - - - - - - - Software piracy whistle-blowers get bigger rewards The Business Software Alliance is doubling the maximum reward it will pay to individuals who report companies that are using pirated software. The BSA--a trade group supported by Microsoft, Adobe Systems and other major software makers to enforce software licenses and copyrights-- announced on Friday that it is raising the ceiling on payments to U.K. whistle-blowers to $37,000(20,000 pounds) for reports received during November and December this year. http://news.com.com/Software+piracy+whistle-blowers+get+bigger+rewards/2100-1012_3-5440483.html http://news.zdnet.co.uk/business/legal/0,39020651,39172761,00.htm - - - - - - - - - - Online fraud tutorials... from the Secret Service? Until Wednesday one of the best public sources of information on how to use a stolen credit card number, forge a drivers license, defeat a burglar alarm or silence a firearm was a website under the control of the U.S. Secret Service. As a jaunty flourish in its high-profile roundup of fraudsters and forgers last Thursday, the agency took over Shadowcrew.com, a New Jersey-based online crime bazaar that sits at the center of the government's "Operation Firewall" investigation. http://www.securityfocus.com/news/9866 - - - - - - - - - - Symantec adds threat data to managed security services The data will be posted using its Secure Internet Interface. In a bid to expand its services business, Symantec Corp. next week plans to start selling security intelligence data as an add-on to its Managed Security Services. Users who pay Symantec to manage their security infrastructures will now also be able to get extensive information on threats particular to their IT systems as well as global cyberthreats, said Dee Liebenstein, group product manager at Cupertino, Calif.-based Symantec. http://computerworld.com/securitytopics/security/story/0,10801,97292,00.html Symantec builds double-clad security service http://news.zdnet.com/2100-1009_22-5440691.html - - - - - - - - - - Microsoft to provide early warning of security flaws Criticized for a program that only provided some of its largest customers with warnings on security problems in its products, Microsoft Corp. now says it will give all computer users early word on such issues. Beginning this month, the Redmond software giant will make public in advance how many security fixes it plans to release in its regular monthly bulletin, how severe the problems are and what products are affected. http://www.securityfocus.com/news/9867 http://software.silicon.com/security/0,39024655,39125659,00.htm Microsoft: Security requires teamwork http://news.zdnet.co.uk/internet/0,39020369,39172758,00.htms - - - - - - - - - - SonicWall to bolster next OS with antivirus scanning Security vendor SonicWall is expected to formally announce on Monday a new operating system that includes the capability for scanning for viruses at the gateway. http://news.zdnet.com/2100-1009_22-5440957.html - - - - - - - - - - RSA sees looming identity crisis online RSA Conference: Businesses must shift their online customers towards a federated identity policy if e-commerce is to take off, says RSA's director of technology. The director of technology for RSA, Andrew Nash, said that businesses need to move their online customers towards a federated identity policy or security threats could bring people to lose confidence in trading. http://news.zdnet.co.uk/0,39020330,39172722,00.htm Avoiding downstream liability We've seen it before: innocent and unsuspecting organizations that have their networked computers hijacked for use as pawns in attacks against other companies' networks. But what about when such hijacking can be averted? Is it the middleman's responsibility to prevent further dispersal of attacks? When a hacker sends a virus and/or infiltrates a system and then uses that system to break into or infect other systems, does it result in potential liability for the victim? http://computerworld.com/securitytopics/security/story/0,,97174,00.html - - - - - - - - - - -- http://www.sbslinks.com/really.htm http://www.msmvps.com/bradley https://www.ecora.com/ecora/jump/pm99.asp Tag: ISA log question Tag: 167349
  - 17
    - SBS 2003 and Sharepoint I changed the name of the site from within the site and now I can't load the page. Is there a way to fix this or can I reinstall sharepoint and fix it? I changed the name from company web. Thanks Tag: ISA log question Tag: 167347
  - 18
    - No Internet access I have set up a new SBS 2000 network according to the following instructions: http://www.smallbizserver.net/Default.aspx?tabid=50 However, none of the workstations and SBS2000 server have Internet access. Though we can ping the workstations/server internally, they can't ping externally (external ip address's or websites.) Any ideas? Thanks. Tag: ISA log question Tag: 167345
  - 19
    - Firewall Client Question With all the technology upgrades between WIN2K and XP, especially after the latest XP SP is it necessary to install the firewall client on a workstation running XP on a Small Business Server Network? Seems to me that itâ??s important to turn off the built in firewall because some application (like Norton Anti-Virus) canâ??t find the computer on the network therefore cannot install the application remotely when XP firewall is turned on. Tag: ISA log question Tag: 167333
  - 20
    - Another Song for the Weekend Well... I was kind of bored this weekend (I don't know why, because I have tons of stuff to do!) and I have been singing this song in my head for the last week or so. So, I thought it might be a nice song of the week (Kevin's SOTW tradition has rub off on all of us). I'm not very good at this, so you are allowed to make fun of me. :-) Hear a clip of the original song: http://www.amazon.com/exec/obidos/clipserve/B000002UQF001007/0/002-9091240-0766451 Users on the Run (a.k.a. Fox on the Run - by Sweet). ---------------- I don't wanna know your servername, cause it doesn't look the same, the way I left it before. OK you got a pretty server case, but the rest is pretty out of place, It looked all right before. Users on the run. They scream and everybody comes a-running. Take an Advil and hide yourself away. I say on the run. S-BS-sy, Users on the run and hide away. You talk about just every hardware brand, but the names you drop are second hand. I've heard it all before. I don't wanna know your servername, cause it doesn't look the same, the way I left it before. Users on the run. They scream and everybody comes a-running. Take an Advil and hide yourself away. I say on the run. S-SBS-sy, Users on the run and hide away. S-SBS-sy, Users on the run. They scream and everybody comes a running. Take an Advil and hide yourself away. I say on the run. S-SBS-sy, SBSer on the run and hide away. -- Javier [SBS MVP] www.msmvps.com/javier << SBS ROCKS !!! >> Tag: ISA log question Tag: 167331
  - 21
    - Database/WebAccess I am trying to formulate a strategy to enable customers to access our database from the web. I think it would be preferable to have the database inhouse rather than on a external server provided by a hosting company...I currently use small business server 2000, does this have the capability to enable me to set up web access directly through our own server? If not, what would I require to do this? Tag: ISA log question Tag: 167327
  - 22
    - << SBS Posting FAQ for New Users - V:1.0 - Last Updated: 2004-07-21>> An HTML version of this document is available at: http://www.sbs-rocks.com/netiquette.htm -------------- The following tips are designed to help you get the fastest and most appropriate answer to your questions. They suggest which newsgroup to use,what basic research to do before posting, information to include in your posting, newsgroup etiquette, and alternate sources of useful information. Following them will help us to help you. =================================================== - Post to the appropriate newsgroup: For SBS 4/4.5: microsoft.public.backoffice.smallbiz For SBS 2000 : microsoft.public.backoffice.smallbiz2000 For SBS 2003 : microsoft.public.windows.server.sbs Microsoft News Server: news.microsoft.com The SBS Newsgroups provide a free forum for threaded discussion and peer support on issues related to Small Business Server by users, service providers and interested parties. Please remember when posting that non Microsoft people don't get paid to be here, and MVPs are -not- Microsoft employees. { Who are the Microsoft MVPs ? http://mvp.support.microsoft.com/default.aspx?scid=fh;EN-US;mvpfaqs } Everyone here is giving generously and freely of their time, experience and expertise to enhance the Small Business Server Community. Join it, support it, respect it and enjoy it. - SBS Rocks ! =================================================== A Web interface to the SBS 2003 newsgroup is at: http://support.microsoft.com/newsgroups/?pr=newsgsbs2003 You'll find the Rules of conduct on the MS Website at: Welcome to Microsoft Discussion Groups http://communities2.microsoft.com/communities/newsgroups/en-us/default.aspx =================================================== - Do some basic researches for previously posted solutions. ( It's most likely been posted and solved before. ) Advanced Google Search: http://www.google.com/advanced_search Domain: microsoft.com experts-exchange.com Advanced Google Groups Search of the Usenet archives: http://groups.google.com/advanced_group_search Advanced Microsoft Search: http://search.microsoft.com/search/search.aspx?st=a&View=en-us (Note that you can also just enter a KB, Q or Error Number) Event Log Entries associated with your issue or setup: http://www.eventid.net (Enter the Event number from the Event Log) http://search.microsoft.com (Enter '1001' (for example) or 'error 1001') Your Public Interface: http://www.dnsreport.com http://www.dnsstuff.com Your network Settings on Servers and workstations: Start > Run > cmd : ipconfig /all Ports Status Start > Run > cmd : netstat -an =================================================== - Post with a meaningful subject line so those with expertise or interest in the topic can find it quickly. - Posting with a purely attention seeking topic such as "DISASTER" or "No-One Ever Responds to Me" may get you noticed -once- but is likely to get you ignored or dropped in future. Remember -everyone's- issue is important to them, so que jumping won't enhance anyone's opinion of you within the newsgroup. Mentioning the SBS component, Exchange, ISA, SQL Server, RAS, Pop Connector etc.in the heading will be a big help in catching the eye of experts in that field. =================================================== - If posting a Question, post with sufficient information for a complete stranger to understand your SBS version, environment; your issue, what you have tried and what failed. You're not cutting down on the typing as you'll be asked anyway, and it can only enhance the speed to diagnosis and resolution. A secondary benefit to this is that in correctly framing the question, the resolution often presents itself. Note: Stating your SBS version ( 4, 4.5, 2000, 2003 ) is particularly important as is whether your SBS 2003 is Standard or Premium and whether you have ISA installed. Please state all messages and IDs in failure notices and/or in the event viewers. Also what may have been installed/changed/updated prior to or during the issue. =================================================== - Posting In capitals on is considered SHOUTING! ...Please don't. =================================================== - Don't overlook or discount Paid Support. If the Issue is urgent or complex, the time you spend searching for a "free" solution. ...and cost factors such as Worker Downtime, Customer Irritation, Lost Productivity, and Hair Replacement costs will likely far outweigh the cost of a Support Call to Microsoft PSS (Product Support Services ) or a Support Professional. Note: Hotfixes are free of charge. Just ask for the specific Hotfix. =================================================== - It's difficult to convey human emotions on Usenet (Humour, Pathos, Sarcasm, Tongue-In-Cheek ) so use of emoticons and/or acronym tags is advised. .... and no; you -don't- have to be serious all the time. It's a community. Enjoy ! =================================================== - There are many paths to a solution and as many experiences in getting there as there are posters. Sometimes the paths are well worn, tried and true. Sometimes paths diverge, sometimes converge, and sometimes new trails are blazed. Understand and respect that, and use what suits you and your situation. =================================================== - People are different, but people are people. You should be nice to them. This is a technical newsgroup and not a place for Egos or Flame Wars. As a community we try to leave them at the door and respect each other. What you post here is archived and available to anyone, anytime. Remember ...."Please don't feed the Trolls!" =================================================== - Newsgroups are not your only source of Information / Help. Many of the members of the SBS Community provide support via Websites, Lists and Blogs such as: http://www.sbslinks.com/ ( Susan's Links to all things SBS) http://www.smallbizserver.net/ ( Mariette's Website and Forum ) http://www.sbs-rocks.com/articles.htm ( Andy's SBS Articles) http://www.sbsfaq.com/ ( Wayne's Website ) sbs2k@yahoogroups.com ( SBS Forum on Yahoo ) Blogs by: Chad, Charlie, Kevin, Susan http://www.msmvps.com/cgross/ http://blogs.msdn.com/canthe http://www.msmvps.com/kwsupport/ http://www.msmvps.com/bradley/ The Microsoft SBS Websites: Small Business Server Homepage for all sorts of Information, Demos, Whitepapers Upgrades, Migrations Events and Training http://www.microsoft.com/windowsserver2003/sbs/default.mspx Small Business Community Sharepoint Site: http://sbcomm.sts.winisp.net/default.aspx Downloads for Windows Small Business Server 2003 - Keep Your Server Up to Date - http://www.microsoft.com/windowsserver2003/sbs/downloads/default.mspx =================================================== - Don't be shy to post a Question ....or an Answer. SBS encompasses a lot and has been known to make even corporate SysAdmins Cringe and MCSEs cry. None of us knows -all- the answers. We were all "Newbies" once and none of us has experience with every permutation, combination, setup and environment SBS is deployed in, so there are -no- stupid or dumb questions. That's the domain of answers that imply that there are. If you're asking a question and know the answer to another one on the page, muck in and post it. The poster may get a faster resolution than they would have, and an additional member may get a response they wouldn't have otherwise Your solution may be a something that we can all learn from. - What goes around, comes around.- =================================================== - It's not only Break/Fix. Anecdotes, Wishlists, Insights and Brickbats are all grist to the mill of SBS Topics and all on-topic for the community. =================================================== - Don't Multi-post*. ( *the Same Posting within different newsgroups or within the same thread.) If you must post to several newsgroups, Cross-post to just the relevant ones. A response in one will then show up in the others and all can follow the thread. =================================================== - Be patient. Newsgroups are not Instant Messaging, and people aren't on-line just waiting for you to post. If the situation -is- that urgent, then Paid Support will pay for itself. Remember: No-one -owes- you a response. =================================================== - Things get missed. Things do get lost or missed, or someone with the appropriate skills or experience may not be available, so if you haven't had a response after 3 Days or so, post again, perhaps with more detail and things you've tried in the interim. ============================================ - Lastly, -enjoy - and remember, SBS Rocks ! For and on behalf of the SBS Community. SBS FAQ Poster *To avoid seeing this Post in the future add it to your Ignore Filter.* Tag: ISA log question Tag: 167326
  - 23
    - Wireless Laptops and DHCP To the newsgroup: Currently, a client has 5 laptops on an 802.11g network. We've noticed slight delays at times when passing off from one WAP to another in the building and the issue appears to be that a new IP address is requested from the server and there is a DHCP error. At first, the DHCP server (the Small Business Server 2000) does not give out an IP address but then the server does. And you notice the lag time. To test, I've manually set the IP addresses on 3 laptops, still connecting wirelessly and the delays disappear, and this makes sense, less DHCP errors. The DNS server is still 192.168.16.2, my IP forwarders are correct on the server. I am going to set the DHCP server on to Auto again so the client can go to their hotspots. Is there a way to reduce this delay on either the client or server? Here is the typical error: Your computer was not able to renew its address from the network (from the DHCP Server) for the Network Card with network address xxxxxxxxxxxxx. The following error occurred: The operation was canceled by the user. . Your computer will continue to try and obtain an address on its own from the network address (DHCP) server. Your tips would be appreciated. Smith Tag: ISA log question Tag: 167316
  - 24
    - moving shared folders in preparation for upgrade Can anyone tell me how to move a shared folder on my SBS computer to a new drive which will allow users to continue to access the contents after the move. Will the permissions stay the same if I simply move the folder using Explorer? Several users have locally mapped drives to these folders, will these continue to work or must they be recreated on each users computer. I searched the SBS help and can't find any reference to moving shared folders. Thanks in advance. Tag: ISA log question Tag: 167315
  - 25
    - (newbie) replacing a client workstation I've been managing a small SBS2000 network for the past two years but so far have not had to make any configuration changes until now (someone else set it up originally). I want to replace an older workstation (one with Windows 98SE) with a newer XP Pro machine. I installed XP Pro on the new machine (it got a HD upgrade) and gave it the same name as the one it's to replace. I also set up some local user accounts (which I'm not sure was necessary). I'm not sure what to do next though, and so far I have not tried connecting it the network. Any help is appreciated. Thanks, Pat Tag: ISA log question Tag: 167305

Hi, all,
Our company is using sbs2000 and ISA is installed. Internal IP 192.168.16.2
and external IP 70.68.x.x. Yesterday I checked the ISA log files. Most of the
IP I saw are 192.168.16.X and 127.0.0.1 which are normal. But I saw two ip
are 70.68.34.x and 70.68.240.x. I don't know they are normal or not becuase I
think I should see all internl IP addresses. The actual message I see in the
log file is (I use x to replace the last 3 digits):
70.68.34.x anonymous - 2004-11-08 00:15:08 w3proxy SERVER - - -
Does this mean our LAN is intruded by a Hecker? What I can do if this this
true? I have very little experience with ISA maintenance. Please help. Thanks
in advance.

Top

Re: ISA log question by Kevin

Kevin
Wed Nov 10 14:58:40 CST 2004

both IP address ranges appear to come from shawcable.net
http://www.senderbase.org/?searchString=shawcable.net&searchBy=domain

but I'll leave it to some one else to deterine what's going on.

--
Kevin Weilbacher [SBS-MVP]
"The days pass by so quickly now, the nights are seldom long"

"John" <John@discussions.microsoft.com> wrote in message
news:F09FB275-D9DF-41C6-9D98-783508A4AE44@microsoft.com...
> Hi, all,
> Our company is using sbs2000 and ISA is installed. Internal IP
> 192.168.16.2
> and external IP 70.68.x.x. Yesterday I checked the ISA log files. Most of
> the
> IP I saw are 192.168.16.X and 127.0.0.1 which are normal. But I saw two ip
> are 70.68.34.x and 70.68.240.x. I don't know they are normal or not
> becuase I
> think I should see all internl IP addresses. The actual message I see in
> the
> log file is (I use x to replace the last 3 digits):
> 70.68.34.x anonymous - 2004-11-08 00:15:08 w3proxy SERVER - - -
> Does this mean our LAN is intruded by a Hecker? What I can do if this this
> true? I have very little experience with ISA maintenance. Please help.
> Thanks
> in advance.
>

Top