• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

0x80074e20 FWX_E_GRACEFUL_SHUTDOWN

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN Page: [1]
Login
Message << Older Topic   Newer Topic >>
0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 16.Jul.2007 12:46:41 PM   
ogsi

 

Posts: 61
Joined: 14.Feb.2007
From: New York, NY
Status: offline
I'm not really sure where this error belong but it is ISA 2006 and Firewall.
I try connecting to this web site http://publisher.firstcall.com/ behind my ISA 2006 Std.
checked it outside my network with home PC and behind ISA 2000 and it is working.
the browser (and I am using IE) show "The page cannot be displayed " & "Error Code 10060: Connection timeout "
so I check my logs and found this:
0x80074e20 FWX_E_GRACEFUL_SHUTDOWN  0x0 0x0 Firewall - 7/16/2007 11:57:25 AM 198.80.191.38 80 HTTP Closed Connection

I tried creating an access rule named firstcall.com to allow ALL traffic coming from 198.80.191.38 on ANY port:
198.80.191.38 TCP  Internet - -  - Req ID: 136ded7d; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 7/16/2007 3:57:46 PM 0 62906 2391 408  10060  0x0 0x40 Web Proxy Filter  7/16/2007 11:57:46 AM 198.80.191.38 80 http Failed Connection Attempt firstcall.com

any idea?
Post #: 1
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 16.Jul.2007 3:55:26 PM   
ferrix

 

Posts: 547
Joined: 16.Mar.2005
Status: offline
Your access rule ought to be from inside to outside, not the way you have it.. The connection is originating from your browser.

I can't think why your browser is timing out, but it seems that ISA is at least receiving the request and connecting out successfully.  If no one else has a better idea, I suggest sniffing the traffic between the browser and the ISA box, using wireshark or network monitor.  You might get a hint what's happening.

(in reply to ogsi)
Post #: 2
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 16.Jul.2007 4:06:14 PM   
ogsi

 

Posts: 61
Joined: 14.Feb.2007
From: New York, NY
Status: offline
my rule is open from the inside out: FROM Internal TO publisher.firstcall.com

I think that the problem is coming back from the web into my firewall, not internally

(in reply to ferrix)
Post #: 3
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 16.Jul.2007 4:27:34 PM   
ferrix

 

Posts: 547
Joined: 16.Mar.2005
Status: offline
Well it's certainly possible to sniff the outside interface too, and you can filter it down to the right IP to eliminate wading through other traffic.

Based on the small info shown, ISA thinks it is connecting normally and closing the connection gracefully.

(in reply to ogsi)
Post #: 4
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 12:01:37 AM   
ogsi

 

Posts: 61
Joined: 14.Feb.2007
From: New York, NY
Status: offline
taking you one line back on the log:
0.0.0.0 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2) Yes Proxy ISA06  198.80.191.38 TCP  Internet - -  - Req ID: 136dec13; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 7/16/2007 3:56:47 PM 0 63031 0 247  10060  0x0 0x42 Web Proxy Filter  7/16/2007 11:56:47 AM 198.80.191.38 80 http Failed Connection Attempt firstcall.com 192.168.200.88 anonymous Internal External GET http://198.80.191.38/

what does Req ID: 136dec13; Compression: client=No, server=No, compress rate=0% decompress rate=0% stand for?
error 1006 also show in this line

(in reply to ferrix)
Post #: 5
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 7:45:36 AM   
ferrix

 

Posts: 547
Joined: 16.Mar.2005
Status: offline
If you try to connect to the site from a browser on the isa server, does that time out as well?  Do you have some routing issue or another firewall after ISA?

(in reply to ogsi)
Post #: 6
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 9:22:20 AM   
ogsi

 

Posts: 61
Joined: 14.Feb.2007
From: New York, NY
Status: offline
I did try from the ISA itself, same result
the ISA is the exit point, it is connected to Verizon's internet T1
don't know of any other routing issues, I have no problem accessing other sites of the same vendor

(in reply to ferrix)
Post #: 7
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 9:26:49 AM   
ferrix

 

Posts: 547
Joined: 16.Mar.2005
Status: offline
Well I'd go back to watching the traffic out of your ISA then, to prove that it's actually getting out.. see if anything's coming back.

You say that on other exit machines it works?  I'm really going out on a limb now, but could it be that the IP of the ISA server is blocked by the web server?

(in reply to ogsi)
Post #: 8
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 9:33:15 AM   
ogsi

 

Posts: 61
Joined: 14.Feb.2007
From: New York, NY
Status: offline
don't think that this is the case cause on trace I get to their network (although not right to that specific server)
C:\>tracert publisher.firstcall.com
Tracing route to publisher.firstcall.com [198.80.191.38]
over a maximum of 30 hops:
1    <1 ms    <1 ms    <1 ms  192.168.200.254
2    <1 ms    <1 ms    <1 ms  isa06.mydomain.com [192.168.200.5]
3     1 ms     1 ms     1 ms  70.x.x.x (***ISA WAN IP***)
4     4 ms     5 ms    25 ms  s5-0-2-1-0.edge-rtr4.ny325.verizon-gni.net [70.x.x.x ***Verizon router IP***]
5   159 ms    26 ms     3 ms  so-4-0-1-0.core-rtr1.ny325.verizon-gni.net [130.
81.9.89]
6     2 ms    13 ms     4 ms  130.81.20.176
7    18 ms     8 ms    23 ms  0.so-3-1-0.XT1.NYC9.ALTER.NET [152.63.10.37]
8   160 ms    40 ms    48 ms  0.so-5-0-0.XL1.BOS4.ALTER.NET [152.63.16.125]
9    72 ms    81 ms    33 ms  POS6-0-0.GW12.BOS4.ALTER.NET [152.63.22.177]
10     *     thomson-gw.customer.alter.net [65.194.77.42]  reports: Destination
net unreachable.
Trace complete.

(in reply to ferrix)
Post #: 9
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 9:35:42 AM   
ferrix

 

Posts: 547
Joined: 16.Mar.2005
Status: offline
You have two conflicting things going on.. it seems that ISA can't connect, yet every indication is that it should connect.  Is the problem in the network layer, with your policy rules, or a bug of some kind?

I would first packet trace the outside and rule out the network layer because it's comparatively easy. 

(in reply to ogsi)
Post #: 10
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 10:12:02 AM   
ogsi

 

Posts: 61
Joined: 14.Feb.2007
From: New York, NY
Status: offline
would hooking a laptop in DMZ and connecting to the site prove taht the problem is ISA?

(in reply to ferrix)
Post #: 11
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 10:31:13 AM   
ferrix

 

Posts: 547
Joined: 16.Mar.2005
Status: offline
That would be something to try.  Then you could take ISA off and cause the laptop to use the ISA's external IP address, and try that way.

(in reply to ogsi)
Post #: 12
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 1:16:55 PM   
ogsi

 

Posts: 61
Joined: 14.Feb.2007
From: New York, NY
Status: offline
ok. laptop at DMZ had no problems getting to taht web site
tracert gave me exact same result

(in reply to ferrix)
Post #: 13
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 1:46:32 PM   
ferrix

 

Posts: 547
Joined: 16.Mar.2005
Status: offline
More and more it seems packet sniffing is in order.  But I am at the limit of what I can guess on the forum here.  That's what Microsoft PSS is for I guess.

(in reply to ogsi)
Post #: 14
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 1:55:28 PM   
ogsi

 

Posts: 61
Joined: 14.Feb.2007
From: New York, NY
Status: offline
I'll try the sniffer
maybe other experts have more ideas?

(in reply to ferrix)
Post #: 15
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 1:57:53 PM   
ferrix

 

Posts: 547
Joined: 16.Mar.2005
Status: offline
Oh yes surely!  Do not assume because I am the first responding that I am a great expert!  I just like to try to help if I can.

(in reply to ogsi)
Post #: 16

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts