Windows Forum

Ask something
Discussion Locked

Proxy Server 2.0

0 helpful
5 replies

by jbutcher

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I am all of the sudden getting a lot of Info Messages in my System Event Log EventID: 125. Mesasage reads "The Web Proxy Service received 15 request from the Internet Port during the past 42 seconds while Internet Publishing was disabled" The number of request vary and the seconds intervals varies but I am receing quite a few of these. I would appreciate any help. I am running Windows NT/Exchange 5.5/Proxy 2.0

5 replies

by bhrdwh

You either have Nimda on your Proxy's IIS or someone is trying to hack into your network.

1. Check IIS version & remove irus with info from www.norton.com or www.mcafee.com sites. Also use IIS Lock from www.microsoft.com.
2.Update NT service pack to SP 6a & install Proxy Update from www.microsoft.com/Proxy site
3. Install any Intrusion Detection System (IDS). One good one is CA's eTrust.t can tell you which IP Address (on you LAN or external) is trying to do what onto your Proxy.
4. Checkevent Viewer Logs of your PDC & Exchange Severs. Is the error there too ?
Let me know if it helped.
Akash
akashdeep_b@yahoo.com

by curlergirl

If you do in fact have Nimda, be sure that you load the latest IIS security patches from the MS Technet web site. One word of caution, though - I recently loaded MS01-041 on one of my servers that was running Proxy and IIS, and it "broke" Proxy - Ihad to uninstall it after an hour-long call to MS Tech Support!! Good Luck and hope this helps.

This discussion is closed to new replies.