Welcome to ISAserver.org

(RPC) all interfaces - problem

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Branch Office >> (RPC) all interfaces - problem

Page: [1]

Message

<< Older Topic Newer Topic >>

(RPC) all interfaces - problem - 9.Nov.2006 3:28:20 PM

Wojtek

Posts: 1
Joined: 9.Nov.2006
Status: offline

Hi
I have a problem with (RPC) all interfaces "syndrome" :)
My company has 2 instances connected via WAN (dedicated).
my office 172.22.0.0
HQ 172.16.0.0
HQ has Exchange 2003 server 172.16.10.20.
ISA 2006 in my office is router to HQ and to Internet (2 x NIC)
I set up routing correctly and it works fine.
ISA is main GW and it routes trafic to HQ to dif. router (cisco) as well.
I set up firewall policy on ISA to HQ (allow all outbound traffic from internal to HQ).
The problem I have is that I cannot connect to exchange server using MS outlook (exchange account). I see in "monitoring, logging:
Dest: 172.16.10.20 , port: 135, protocol: (RPC) all interfaces, action: DENIED CONNECTION, from any of local computers, Rule: EMPTY
I do not use VPN, I do not have to.
When I make routing directly to HQ (bypass ISA) works fine.
Is there a possibility to set it up? Using some kind of policy...

LAN----->ISA----Internet
          |
    cisco router
           |
          HQ

Thnx in advanced
Wojtek

Post #: 1

Featured Links*

RE: (RPC) all interfaces - problem - 20.Nov.2006 11:37:08 AM

tshinder

Posts: 47184
Joined: 10.Jan.2001
From: Texas
Status: offline

1. Where are the clients?

2. Where is the ISA Firewall?

3. Where is the Exchange Server?

4. Are there any other filtering devices between the client and the Exchange Server?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to Wojtek)

Post #: 2

RE: (RPC) all interfaces - problem - 11.Oct.2007 1:10:55 PM

crester

Posts: 8
Joined: 26.Jul.2004
Status: offline

Hello.
My problem is exactly the same

LAN ----------------------> ISA 2006 -------> INTERNET
             |
              |
              |
              |
    Cisco Router
              |
              |
              |
          HQ

But if I change back to my ISA 2000 it works perfect
I can ping exchange server with ISA 2006

Thanks in advance

(in reply to tshinder)

Post #: 3

RE: (RPC) all interfaces - problem - 11.Oct.2007 1:58:39 PM

tshinder

Posts: 47184
Joined: 10.Jan.2001
From: Texas
Status: offline

What are you trying to accomplish?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to crester)

Post #: 4

RE: (RPC) all interfaces - problem - 11.Oct.2007 4:50:40 PM

crester

Posts: 8
Joined: 26.Jul.2004
Status: offline

Hi Tom.
well the problem is exactly the same as the first post.
Exchange in HQ, Isa 2006 and RPC all interfaces denied connections.

it is extrange. If I connect via VPN to the ISA server, I am able to connect with outlook but not if I connect via LAN.

I discovered that if I disable add-in RPC filter, it works in both sides, LAN and VPN clients.

Later I have found this thread
http://forums.isaserver.org/m_2002054638/mpage_1/key_/tm.htm#2002054638
but i have applied both patches and when I enable the filter it behaves equal.
RPC (All interfaces) denied connection

Thank you

(in reply to tshinder)

Post #: 5

RE: (RPC) all interfaces - problem - 12.Oct.2007 8:08:50 AM

tshinder

Posts: 47184
Joined: 10.Jan.2001
From: Texas
Status: offline

Hmmm. It should work. It used to work

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to crester)

Post #: 6