IP Addresses in log entries

Hi

Wonder if anyone can offer any insight on this....

Hosting several SharePoint portals on IIS6, authenticated users only.
Users come in from the internet - there are no local users.

The IIS log files record the user name and IP address - great.

Except I noticed today that one (and only one) site is logging the
internal interface IP of our NAT firewall (192.168.1.x) instead of the
users actual public IP.

This is only happening on one site, and as far as I know it is
configured no differently than the others.

Can anyone help explain this behaviour?

Many thanks in advance,

Richard

Re: IP Addresses in log entries

Hello,

Something must be different. Do you forward requests in the NAT firewall
the same way? Because i have a feeling that this is something outside of
IIS.

--
Regards,
Kristofer Gafvert
http://www.gafvert.info/iis/ - IIS Related Info


richard.markiewicz@eshareuk.com wrote:

>Hi
>
>Wonder if anyone can offer any insight on this....
>
>Hosting several SharePoint portals on IIS6, authenticated users only.
>Users come in from the internet - there are no local users.
>
>The IIS log files record the user name and IP address - great.
>
>Except I noticed today that one (and only one) site is logging the
>internal interface IP of our NAT firewall (192.168.1.x) instead of the
>users actual public IP.
>
>This is only happening on one site, and as far as I know it is
>configured no differently than the others.
>
>Can anyone help explain this behaviour?
>
>Many thanks in advance,
>
>Richard

Re: IP Addresses in log entries

On Oct 17, 1:58 pm, "Kristofer Gafvert"
wrote:
> Hello,
>
> Something must be different. Do you forward requests in the NAT firewall
> the same way? Because i have a feeling that this is something outside of
> IIS.
>
> --
> Regards,
> Kristofer Gafverthttp://www.gafvert.info/iis/- IIS Related Info
>
> richard.markiew...@eshareuk.com wrote:
> >Hi
>
> >Wonder if anyone can offer any insight on this....
>
> >Hosting several SharePoint portals on IIS6, authenticated users only.
> >Users come in from the internet - there are no local users.
>
> >The IIS log files record the user name and IP address - great.
>
> >Except I noticed today that one (and only one) site is logging the
> >internal interface IP of our NAT firewall (192.168.1.x) instead of the
> >users actual public IP.
>
> >This is only happening on one site, and as far as I know it is
> >configured no differently than the others.
>
> >Can anyone help explain this behaviour?
>
> >Many thanks in advance,
>
> >Richard

Yes, it does seem like that. However the firewall rules are basically
the same. All SharePoint sites are on distinct, private IP addresses.
The firewall simply does 1-1 NAT between distinct public IPs and the
distinct private IPs. They all allow only ports 80 and 443.

Very strange :S

Thanks, Richard