<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://192.168.2.20/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>SBS Security - workstation and caller both point to your server and the error is about logon/logoff failure</title><link>http://192.168.2.20/blogs/doverton/archive/2006/06/09/558.aspx</link><description>I recently created a FTP site to enable uploading of pictures for my blog entries by Word 2007 and suddenly I started getting lots of errors on my system. They took the form of: Event Type: Failure Audit Event Source: Security Event Category: Logon/Logoff</description><dc:language>en</dc:language><generator>CommunityServer 2008.5 SP2 (Build: 40407.4157)</generator><item><title>re: SBS Security - workstation and caller both point to your server and the error is about logon/logoff failure</title><link>http://192.168.2.20/blogs/doverton/archive/2006/06/09/558.aspx#1980</link><pubDate>Tue, 12 Sep 2006 16:39:36 GMT</pubDate><guid isPermaLink="false">72050d9c-4f41-4a16-9f70-ebbf2c98a2c7:1980</guid><dc:creator>David Overton</dc:creator><description>&lt;p&gt;alas, a firewall is not the answer - the joys of FTP means that it is a text based login, so always open to this type of abuse. &amp;nbsp;A application layer firewall, such as ISA can help here, but otherwise, if you run ftp, you have to accept your machine is open to attack&lt;/p&gt;
&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://192.168.2.20/aggbug.aspx?PostID=1980" width="1" height="1"&gt;</description></item><item><title>re: SBS Security - workstation and caller both point to your server and the error is about logon/logoff failure</title><link>http://192.168.2.20/blogs/doverton/archive/2006/06/09/558.aspx#1979</link><pubDate>Tue, 12 Sep 2006 16:23:40 GMT</pubDate><guid isPermaLink="false">72050d9c-4f41-4a16-9f70-ebbf2c98a2c7:1979</guid><dc:creator>Kevin</dc:creator><description>David,
You ever figure out how to stop this from happening?  I'm guessing a nicely tuned firewall is the best option?

Thanks&lt;div style="clear:both;"&gt;&lt;/div&gt;&lt;img src="http://192.168.2.20/aggbug.aspx?PostID=1979" width="1" height="1"&gt;</description></item></channel></rss>