Two IP addresses showing up

HI all,
I have:
2003 standard server edition sp2:
When I run ipconfig.exe I see:
IP address 192.168.xxx.xxx
Subnet mask
IP address 192.168.xxx.xxx
Subnet mask
Default gateway 192.168.xxx.xxx

The second IP address is the static IP setup under tcp/ip
the first ip address is added under advanced tcp/ip settings.
At one time I had an ISA server setup but it crashed and I used a sonicwall
device we had on hand to replace it.
My question is do I still need the IP address that is added under the
advanced tab.
The only thing I can think that this ip was setup for was the ISA server to
allow internet access. This ip is not part of my network ip addressing.
Can I remove it without affecting server function. The only other thing I
can think of is I am running liveupdate from symantec on this machine.
Anyone know why it would be setup like this? I just want to make sure I do
not have a virus . When I log on as the administrator instead of showing the
server ip under sessions it shows 127.0.0.1.
Could this be some type of virus?
Thanks in advance for any help on this.
Sher

Hello Sher,

If you don't need the second ip address for any kind of application i would
remove it. Just confuses.

The loopback address 127.0.0.1 is added from the OS itself on the NIC, so
it is NO virus. On the server better use the real ip address instead, so
change this to it.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> HI all,
> I have:
> 2003 standard server edition sp2:
> When I run ipconfig.exe I see:
> IP address 192.168.xxx.xxx
> Subnet mask
> IP address 192.168.xxx.xxx
> Subnet mask
> Default gateway 192.168.xxx.xxx
> The second IP address is the static IP setup under tcp/ip
> the first ip address is added under advanced tcp/ip settings.
> At one time I had an ISA server setup but it crashed and I used a
> sonicwall
> device we had on hand to replace it.
> My question is do I still need the IP address that is added under the
> advanced tab.
> The only thing I can think that this ip was setup for was the ISA
> server to
> allow internet access. This ip is not part of my network ip
> addressing.
> Can I remove it without affecting server function. The only other
> thing I
> can think of is I am running liveupdate from symantec on this machine.
> Anyone know why it would be setup like this? I just want to make sure
> I do
> not have a virus . When I log on as the administrator instead of
> showing the
> server ip under sessions it shows 127.0.0.1.
> Could this be some type of virus?
> Thanks in advance for any help on this.
> She

I am not understanding what you mean when you say better to use server ip and
to change it. Change it where? Also how can I tell if a program is using
the second ip address? I use symantec live update and I don't know where to
look to see if it is being used by symantec.


"Meinolf Weber [MVP-DS]" wrote:

> Hello Sher,
>
> If you don't need the second ip address for any kind of application i would
> remove it. Just confuses.
>
> The loopback address 127.0.0.1 is added from the OS itself on the NIC, so
> it is NO virus. On the server better use the real ip address instead, so
> change this to it.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > HI all,
> > I have:
> > 2003 standard server edition sp2:
> > When I run ipconfig.exe I see:
> > IP address 192.168.xxx.xxx
> > Subnet mask
> > IP address 192.168.xxx.xxx
> > Subnet mask
> > Default gateway 192.168.xxx.xxx
> > The second IP address is the static IP setup under tcp/ip
> > the first ip address is added under advanced tcp/ip settings.
> > At one time I had an ISA server setup but it crashed and I used a
> > sonicwall
> > device we had on hand to replace it.
> > My question is do I still need the IP address that is added under the
> > advanced tab.
> > The only thing I can think that this ip was setup for was the ISA
> > server to
> > allow internet access. This ip is not part of my network ip
> > addressing.
> > Can I remove it without affecting server function. The only other
> > thing I
> > can think of is I am running liveupdate from symantec on this machine.
> > Anyone know why it would be setup like this? I just want to make sure
> > I do
> > not have a virus . When I log on as the administrator instead of
> > showing the
> > server ip under sessions it shows 127.0.0.1.
> > Could this be some type of virus?
> > Thanks in advance for any help on this.
> > Sher
>
>
>

Hello Sher,

The 127.0.0.1 is configured on the NIC on the server, change this ip address
to the real server ip address.

Remove the second NIC and see what happens, then check if the problem belongs
to that and chagne the ip address used on the problem machine/application
to the other ip address.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I am not understanding what you mean when you say better to use server
> ip and to change it. Change it where? Also how can I tell if a
> program is using the second ip address? I use symantec live update
> and I don't know where to look to see if it is being used by symantec.
>
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Sher,
>>
>> If you don't need the second ip address for any kind of application i
>> would remove it. Just confuses.
>>
>> The loopback address 127.0.0.1 is added from the OS itself on the
>> NIC, so it is NO virus. On the server better use the real ip address
>> instead, so change this to it.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> HI all,
>>> I have:
>>> 2003 standard server edition sp2:
>>> When I run ipconfig.exe I see:
>>> IP address 192.168.xxx.xxx
>>> Subnet mask
>>> IP address 192.168.xxx.xxx
>>> Subnet mask
>>> Default gateway 192.168.xxx.xxx
>>> The second IP address is the static IP setup under tcp/ip
>>> the first ip address is added under advanced tcp/ip settings.
>>> At one time I had an ISA server setup but it crashed and I used a
>>> sonicwall
>>> device we had on hand to replace it.
>>> My question is do I still need the IP address that is added under
>>> the
>>> advanced tab.
>>> The only thing I can think that this ip was setup for was the ISA
>>> server to
>>> allow internet access. This ip is not part of my network ip
>>> addressing.
>>> Can I remove it without affecting server function. The only other
>>> thing I
>>> can think of is I am running liveupdate from symantec on this
>>> machine.
>>> Anyone know why it would be setup like this? I just want to make
>>> sure
>>> I do
>>> not have a virus . When I log on as the administrator instead of
>>> showing the
>>> server ip under sessions it shows 127.0.0.1.
>>> Could this be some type of virus?
>>> Thanks in advance for any help on this.
>>> Sher

"Sher" <> wrote in message
news:A55CF17D-9FE0-457A-B7D8-...
> The second IP address is the static IP setup under tcp/ip
> the first ip address is added under advanced tcp/ip settings.
> At one time I had an ISA server setup but it crashed and I used a
> sonicwall
> device we had on hand to replace it.
> My question is do I still need the IP address that is added under the
> advanced tab.

If you don't know,....how are we to?

> The only thing I can think that this ip was setup for was the ISA server
> to
> allow internet access.

No. There is no scenario where that could be true.

> This ip is not part of my network ip addressing.

Then someone probably didn't know what they were doing and screwed up and
left an invalid IP# on the Internal Interface of the ISA. Just my guess
anyway.

> Can I remove it without affecting server function. The only other thing I
> can think of is I am running liveupdate from symantec on this machine.

You should never be running this on an ISA. An ISA runs on a machine all by
itself,...period,...end of story.

> I just want to make sure I do not have a virus .

???

> When I log on as the administrator instead of showing the
> server ip under sessions it shows 127.0.0.1.

What does that mean? How does logging into a machine as an Administrator
"show an IP#"?


--
Phillip Windell

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Technet Library
ISA2004
http://technet.microsoft.com/en-us/l...chNet.10).aspx
ISA2006
http://technet.microsoft.com/en-us/l...chNet.10).aspx

Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/downlo...7/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/p...s/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/e...epartners.mspx
-----------------------------------------------------