HI, I have a win 2k3 server running and I noticed in my router log of the attached computers its showing my server using 11 of my 20 available IP addresses. On the server I have active directory, IIS, exchange 2k3 and some shared folders. Only 1 network card installed, and all IPs have the same mac address any ideas what's causing this?

So if the server really has all that IP addresses, there must also be a routing entry for each IP. What did route print show in a cmd dos box?

well under the active routes its showing my servers IP and the IP of my vpn, and the localhost IP, and the default gateway. theres 5 IP addresses in the list that i didn't recognize so I looked them up and theres some from asia, austria and a few other places.

Are there listed your public IP, you mentioned? ??? In your routing table, there are listed some IPs from Asia, Austria and others? Oh you may have to check the route print command, by disabling the public nic first. Because, if your public nic has a public ip and someone accesses the internet, you'll get some additional routing entries.

Is the server assigned a static ip? From what you write it does not appear to be but set as a dhcp client. It also appears you are using the router to provide dhcp. All servers, routers, network devices should have a static assigned ip. You should have your server providing dhcp not the router. Is the router giving the MS DNS server [which is also your AD/IIS/Etc server] as the listed dns server for the workstations? It should be. router should have the public ip. Only one nic in the server. shouldn't be browsing the web from the server. great way to infect it. Example of Oxymoron: Person who is pro life and anti sex education. Education is key to prevention. Prevent conception you prevent abortion. Abstinence training clearly isn't working.

I ended up figuring out what my problem was, each time I connect to my VPN the server, x.x.x.3 is on the router dhcp log, then the vpn itself has one, x.x.x.14, and then the client connecting to the vpn gets its own IP, thats where all the IPs were coming from. Thanks guys!!