Link to home
Start Free TrialLog in
Avatar of dekkar
dekkar

asked on

ISA Server 2004 Route Error 14147

Hi Guys.... I just noticed an error on my ISA server that looks like this:

Event Type:      Error
Event Source:      Microsoft Firewall
Event Category:      None
Event ID:      14147
Date:            18/05/2006
Time:            11:03:30 AM
User:            N/A
Computer:      FBRS-ISA
ISA Server detected routes through the network adapter WAN-14.x that do not correlate with the network to which this network adapter belongs. When networks are configured correctly, the IP address ranges included in each array-level network must include all IP addresses that are routable through its network adapters according to their routing tables. Otherwise valid packets may be dropped as spoofed. The following ranges are included in the network's IP address ranges but are not routable through any of the network's adapters: 192.168.30.0-192.168.31.255;


I had a look at my log, and its seems this error has been occuring a fair bit, over all 3 nics (internal, external, DMZ)... Not too sure if I should be worried or not..

The Route table looks like this:

Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0     192.168.14.1     192.168.14.2     20
     58.173.20.14  255.255.255.255     192.168.14.1     192.168.14.2     20
        127.0.0.0        255.0.0.0        127.0.0.1        127.0.0.1      1
     192.168.10.0    255.255.255.0     192.168.13.1     192.168.13.2      1
     192.168.11.0    255.255.255.0     192.168.13.1     192.168.13.2      1
     192.168.12.0    255.255.255.0     192.168.13.1     192.168.13.2      1
     192.168.13.0    255.255.255.0     192.168.13.2     192.168.13.2     10
     192.168.13.2  255.255.255.255        127.0.0.1        127.0.0.1     10
     192.168.13.6  255.255.255.255    192.168.13.15    192.168.13.15      1
    192.168.13.12  255.255.255.255    192.168.13.15    192.168.13.15      1
    192.168.13.15  255.255.255.255        127.0.0.1        127.0.0.1     50
   192.168.13.255  255.255.255.255     192.168.13.2     192.168.13.2     10
     192.168.14.0    255.255.255.0     192.168.14.2     192.168.14.2     20
     192.168.14.2  255.255.255.255        127.0.0.1        127.0.0.1     20
   192.168.14.255  255.255.255.255     192.168.14.2     192.168.14.2     20
     192.168.50.0    255.255.255.0     192.168.50.8     192.168.50.8     10
     192.168.50.8  255.255.255.255        127.0.0.1        127.0.0.1     10
   192.168.50.255  255.255.255.255     192.168.50.8     192.168.50.8     10
     195.78.19.66  255.255.255.255     192.168.14.1     192.168.14.2     20
        224.0.0.0        240.0.0.0     192.168.13.2     192.168.13.2     10
        224.0.0.0        240.0.0.0     192.168.14.2     192.168.14.2     20
        224.0.0.0        240.0.0.0     192.168.50.8     192.168.50.8     10
  255.255.255.255  255.255.255.255     192.168.13.2     192.168.13.2      1
  255.255.255.255  255.255.255.255     192.168.14.2     192.168.14.2      1
  255.255.255.255  255.255.255.255     192.168.50.8     192.168.50.8      1
Default Gateway:      192.168.14.1
===========================================================================
Persistent Routes:
  Network Address          Netmask  Gateway Address  Metric
     192.168.11.0    255.255.255.0     192.168.13.1       1
     192.168.12.0    255.255.255.0     192.168.13.1       1
     192.168.10.0    255.255.255.0     192.168.13.1       1


And I didnt set this up originally, so I dont really have that much knowledge on how it all fits together....

I do know that
192.168.10.x-192.168.13.x is internal
192.168.50.x is DMZ
192.168.14.x is External

Is anyone able to shed some light on it?

Much appreciated...
Dekkar

ASKER CERTIFIED SOLUTION
Avatar of Kamran Arshad
Kamran Arshad
Flag of Pakistan image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of dekkar
dekkar

ASKER

Thanks for the links... should help me sort it out.