Welcome to MobyThreads.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in
All support for the MobyThreads Threaded phpBB MOD can now be found on welsolutions at this forum

IP Addresses in log entries

 
   Web Hosting and Web Master Forums (Home) -> IIS RSS
Next:  Apache and OpenSSL Configuration Question  
Author Message
richard.markiewicz

External


Since: Jun 07, 2007
Posts: 4



(Msg. 1) Posted: Wed Oct 17, 2007 1:57 pm
Post subject: IP Addresses in log entries
Archived from groups: microsoft>public>inetserver>iis (more info?)

Hi

Wonder if anyone can offer any insight on this....

Hosting several SharePoint portals on IIS6, authenticated users only.
Users come in from the internet - there are no local users.

The IIS log files record the user name and IP address - great.

Except I noticed today that one (and only one) site is logging the
internal interface IP of our NAT firewall (192.168.1.x) instead of the
users actual public IP.

This is only happening on one site, and as far as I know it is
configured no differently than the others.

Can anyone help explain this behaviour?

Many thanks in advance,

Richard

 >> Stay informed about: IP Addresses in log entries 
Back to top
Login to vote
kgafvert

External


Since: Aug 23, 2003
Posts: 2972



(Msg. 2) Posted: Wed Oct 17, 2007 1:57 pm
Post subject: Re: IP Addresses in log entries [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hello,

Something must be different. Do you forward requests in the NAT firewall
the same way? Because i have a feeling that this is something outside of
IIS.

--
Regards,
Kristofer Gafvert
http://www.gafvert.info/iis/ - IIS Related Info


richard.markiewicz DeleteThis @eshareuk.com wrote:

>Hi
>
>Wonder if anyone can offer any insight on this....
>
>Hosting several SharePoint portals on IIS6, authenticated users only.
>Users come in from the internet - there are no local users.
>
>The IIS log files record the user name and IP address - great.
>
>Except I noticed today that one (and only one) site is logging the
>internal interface IP of our NAT firewall (192.168.1.x) instead of the
>users actual public IP.
>
>This is only happening on one site, and as far as I know it is
>configured no differently than the others.
>
>Can anyone help explain this behaviour?
>
>Many thanks in advance,
>
>Richard

 >> Stay informed about: IP Addresses in log entries 
Back to top
Login to vote
richard.markiewicz

External


Since: Jun 07, 2007
Posts: 4



(Msg. 3) Posted: Wed Oct 17, 2007 5:58 pm
Post subject: Re: IP Addresses in log entries [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On Oct 17, 1:58 pm, "Kristofer Gafvert" <kgafv... RemoveThis @NEWSilopia.com>
wrote:
> Hello,
>
> Something must be different. Do you forward requests in the NAT firewall
> the same way? Because i have a feeling that this is something outside of
> IIS.
>
> --
> Regards,
> Kristofer Gafverthttp://www.gafvert.info/iis/- IIS Related Info
>
> richard.markiew... RemoveThis @eshareuk.com wrote:
> >Hi
>
> >Wonder if anyone can offer any insight on this....
>
> >Hosting several SharePoint portals on IIS6, authenticated users only.
> >Users come in from the internet - there are no local users.
>
> >The IIS log files record the user name and IP address - great.
>
> >Except I noticed today that one (and only one) site is logging the
> >internal interface IP of our NAT firewall (192.168.1.x) instead of the
> >users actual public IP.
>
> >This is only happening on one site, and as far as I know it is
> >configured no differently than the others.
>
> >Can anyone help explain this behaviour?
>
> >Many thanks in advance,
>
> >Richard

Yes, it does seem like that. However the firewall rules are basically
the same. All SharePoint sites are on distinct, private IP addresses.
The firewall simply does 1-1 NAT between distinct public IPs and the
distinct private IPs. They all allow only ports 80 and 443.

Very strange :S

Thanks, Richard
 >> Stay informed about: IP Addresses in log entries 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
IIS 6 and ACL entries - Hello all, I am having a problem with IIS 6 and ACL's. I have a webDAV folder setup with windows integrated and digest authentication. I am trying to tighten down the security so that only a few users can access this folder. I have 2 user accounts..

What are these entries? - I've found the following entries in my IIS log. The log format is the first line Are both attacks? c-ip s-port cs-method cs-uri-stem sc-status cs(User-Agent) ------------------------------------------------------------------ 70.49.90.233 80 ..

IIS DAV Metabase Entries? - Hello all, Quick question about yesterday's security advisory MS04-030 about vulnerabilities in WebDAV. The FAQ section for the advisory says: "You can configure these new limits by using metabase entries. If an application requires documents tha...

problem with DNS entries - We have set up a local dns entry on our dns server. this would only work in-house on our network, but that is all we need. the problem is that we have sub domains as well. eg primary would be www.siteone.co.za and then two sub domains as ..

METABASE Entries - Help I want to backup the metabase, can someone tell the steps to repair the metabse entry in win2000
   Web Hosting and Web Master Forums (Home) -> IIS All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]