Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
"Web Proxy filter failed to bind its socket" some thing new
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
"Web Proxy filter failed to bind its socket" ... - 16.Jul.2008 1:10:43 PM
|
|
|
gordiangroup
Posts: 3
Joined: 16.Jul.2008
Status: offline
|
We are running Isa 2006 sp1 to publish Exchange 2007. once a day, I get the following messages, and port 443 stops responding. I know it is just 443, becasue i can get to OWA on port 80 before the redirect. i restart Micorsoft firewall and it clears up.
Here is the thing. This only happens once, rarely twice a day. Goes away for a couple of days sometimes.
now the port 80 works. even when port 443 is down.
I am not running IIS or any other programs on the server except symantec AV. i tried it without that too.
I am using the same web listener in 2 rules, one for OWA one for active sync
Here are the errors I get;
Systems log:
Event Type: Warning
Event Source: E1000
Event Category: None
Event ID: 27
Date: 7/16/2008
Time: 8:20:03 AM
User: N/A
Computer: TGGFW1
Description:
Intel(R) PRO/1000 MT Network Connection Link has been disconnected.
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 1b 00 04 80 .......€
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 1b 00 04 80 ...€
Event Type: Information
Event Source: Tcpip
Event Category: None
Event ID: 4202
Date: 7/16/2008
Time: 8:20:13 AM
User: N/A
Computer: TGGFW1
Description:
The system detected that network adapter Intel(R) PRO/1000 MT Network Connection was disconnected from the network, and the adapter's network configuration has been released. If the network adapter was not disconnected, this may indicate that it has malfunctioned. Please contact your vendor for updated drivers.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 50 00 ......P.
0008: 00 00 00 00 6a 10 00 40 ....j..@
0010: 02 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Information
Event Source: BROWSER
Event Category: None
Event ID: 8033
Date: 7/16/2008
Time: 8:20:13 AM
User: N/A
Computer: TGGFW1
Description:
The browser has forced an election on network \Device\NetBT_Tcpip_{E33B9A7B-A45F-471E-BFC7-857EB16D93CA} because a master browser was stopped.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: E1000
Event Category: None
Event ID: 32
Date: 7/16/2008
Time: 8:20:24 AM
User: N/A
Computer: TGGFW1
Description:
Intel(R) PRO/1000 MT Network Connection Link has been established: 1000Mbps.
Data:
0000: 00 00 04 00 02 00 58 00 ......X.
0008: 00 00 00 00 20 00 04 40 .... ..@
0010: 00 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
0028: 20 00 04 40 ..@
Event Type: Information
Event Source: Tcpip
Event Category: None
Event ID: 4201
Date: 7/16/2008
Time: 8:20:28 AM
User: N/A
Computer: TGGFW1
Description:
The system detected that network adapter Intel(R) PRO/1000 MT Network Connection was connected to the network, and has initiated normal operation over the network adapter.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 00 00 00 00 02 00 50 00 ......P.
0008: 00 00 00 00 69 10 00 40 ....i..@
0010: 02 00 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 00 00 00 00 00 00 00 ........
Event Type: Information
Event Source: W32Time
Event Category: None
Event ID: 37
Date: 7/16/2008
Time: 8:20:30 AM
User: N/A
Computer: TGGFW1
Description:
The time provider NtpClient is currently receiving valid time data from tggfile1.gordian-group.com (ntp.d|192.168.1.207:123->192.168.1.239:123).
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
All this happens just before the errors in application log.
All this happens right before these errors
Event Type: Error
Event Source: Microsoft ISA Server Web Proxy
Event Category: None
Event ID: 21216
Date: 7/16/2008
Time: 8:20:18 AM
User: N/A
Computer: TGGFW1
Description:
The Web publishing rule Gordian Outlook Anywhere failed because the Web listener selected for the rule is not valid. Verify that the Web listener specifies a valid IP address on this computer.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Microsoft ISA Server Web Proxy
Event Category: None
Event ID: 21216
Date: 7/16/2008
Time: 8:20:18 AM
User: N/A
Computer: TGGFW1
Description:
The Web publishing rule Gordian OWA failed because the Web listener selected for the rule is not valid. Verify that the Web listener specifies a valid IP address on this computer.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Microsoft ISA Server Web Proxy
Event Category: None
Event ID: 21216
Date: 7/16/2008
Time: 8:20:18 AM
User: N/A
Computer: TGGFW1
Description:
The Web publishing rule Gordian ActiveSync failed because the Web listener selected for the rule is not valid. Verify that the Web listener specifies a valid IP address on this computer.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 21217
Date: 7/16/2008
Time: 8:20:21 AM
User: N/A
Computer: TGGFW1
Description:
The server publishing rule Gordian SMTP Server failed because the listening IP addresses specified for the rule are not valid. Verify that the rule specifies a valid IP address on this computer.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c6 04 07 80 Æ..€
Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 21217
Date: 7/16/2008
Time: 8:20:21 AM
User: N/A
Computer: TGGFW1
Description:
The server publishing rule Gordian POP3 Server failed because the listening IP addresses specified for the rule are not valid. Verify that the rule specifies a valid IP address on this computer.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c6 04 07 80 Æ..€
Event Type: Error
Event Source: Microsoft Firewall
Event Category: None
Event ID: 21217
Date: 7/16/2008
Time: 8:20:21 AM
User: N/A
Computer: TGGFW1
Description:
The server publishing rule Gordian POP3S Server failed because the listening IP addresses specified for the rule are not valid. Verify that the rule specifies a valid IP address on this computer.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: c6 04 07 80 Æ..€
Event Type: Warning
Event Source: Microsoft ISA Server Web Proxy
Event Category: None
Event ID: 14148
Date: 7/16/2008
Time: 8:20:33 AM
User: N/A
Computer: TGGFW1
Description:
The Web Proxy filter failed to bind its socket to 64.16.162.136 port 443. This may have been caused by another service that is already using the same port or by a network adapter that is not functional. To resolve this issue, restart the Microsoft Firewall service. The error code specified in the data area of the event properties indicates the cause of the failure.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 40 27 07 80 @'.€
|
|
|
|
|
RE: "Web Proxy filter failed to bind its socket&qu... - 16.Jul.2008 2:56:17 PM
|
|
|
gordiangroup
Posts: 3
Joined: 16.Jul.2008
Status: offline
|
not using dhcp. i'll try the link you posted. Let me add, that i have tow servers doing this
|
|
|
|
|
RE: "Web Proxy filter failed to bind its socket&qu... - 16.Jul.2008 7:07:47 PM
|
|
|
Jason Jones
Posts: 2216
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
|
Looks like your network connectiuon is dropping at certain times...maybe the netwok is very busy or under load at a certain time -large file copy perhaps?.
Once the NIC drops (as in the event logs) ISA will realise there is no adapter with a valid IP address and you will get the listener errors. Once the NIC is back, a firewall service restart will reenable the listneres as the IP will now be valid.
Are your NICs configure with specific duplex/speed settings? Is the switch matched to the same settings for the used port? If not, this may be worth looking at to make sure the NIC isn't flapping or randomly trying to negotiate settings with the switch.
Maybe the NIC is faulty, or a faulty swich?
I would sort the network issue and I think you will find that the ISA problem is fixed too, as ISA is likely to be a symptom, not the problem...
Cheers
JJ
_____________________________
Jason Jones (MVP)
Silversands Limited http://www.silversands.co.uk
My Blog: http://blog.msfirewall.org.uk/
Get our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
|
RE: "Web Proxy filter failed to bind its socket&qu... - 17.Jul.2008 10:56:42 AM
|
|
|
gordiangroup
Posts: 3
Joined: 16.Jul.2008
Status: offline
|
I changed out the switch, lets see if that fixes it
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
