Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
0x80074e20 FWX_E_GRACEFUL_SHUTDOWN
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 16.Jul.2007 12:46:41 PM
|
|
|
ogsi
Posts: 47
Joined: 14.Feb.2007
From: New York, NY
Status: offline
|
I'm not really sure where this error belong but it is ISA 2006 and Firewall.
I try connecting to this web site http://publisher.firstcall.com/ behind my ISA 2006 Std.
checked it outside my network with home PC and behind ISA 2000 and it is working.
the browser (and I am using IE) show "The page cannot be displayed " & "Error Code 10060: Connection timeout "
so I check my logs and found this:
0x80074e20 FWX_E_GRACEFUL_SHUTDOWN 0x0 0x0 Firewall - 7/16/2007 11:57:25 AM 198.80.191.38 80 HTTP Closed Connection
I tried creating an access rule named firstcall.com to allow ALL traffic coming from 198.80.191.38 on ANY port:
198.80.191.38 TCP Internet - - - Req ID: 136ded7d; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 7/16/2007 3:57:46 PM 0 62906 2391 408 10060 0x0 0x40 Web Proxy Filter 7/16/2007 11:57:46 AM 198.80.191.38 80 http Failed Connection Attempt firstcall.com
any idea?
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 16.Jul.2007 3:55:26 PM
|
|
|
ferrix
Posts: 369
Joined: 16.Mar.2005
Status: offline
|
Your access rule ought to be from inside to outside, not the way you have it.. The connection is originating from your browser.
I can't think why your browser is timing out, but it seems that ISA is at least receiving the request and connecting out successfully. If no one else has a better idea, I suggest sniffing the traffic between the browser and the ISA box, using wireshark or network monitor. You might get a hint what's happening.
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 16.Jul.2007 4:06:14 PM
|
|
|
ogsi
Posts: 47
Joined: 14.Feb.2007
From: New York, NY
Status: offline
|
my rule is open from the inside out: FROM Internal TO publisher.firstcall.com
I think that the problem is coming back from the web into my firewall, not internally
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 16.Jul.2007 4:27:34 PM
|
|
|
ferrix
Posts: 369
Joined: 16.Mar.2005
Status: offline
|
Well it's certainly possible to sniff the outside interface too, and you can filter it down to the right IP to eliminate wading through other traffic.
Based on the small info shown, ISA thinks it is connecting normally and closing the connection gracefully.
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 12:01:37 AM
|
|
|
ogsi
Posts: 47
Joined: 14.Feb.2007
From: New York, NY
Status: offline
|
taking you one line back on the log:
0.0.0.0 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Maxthon; .NET CLR 1.1.4322; .NET CLR 2.0.50727; InfoPath.2) Yes Proxy ISA06 198.80.191.38 TCP Internet - - - Req ID: 136dec13; Compression: client=No, server=No, compress rate=0% decompress rate=0% - - - 7/16/2007 3:56:47 PM 0 63031 0 247 10060 0x0 0x42 Web Proxy Filter 7/16/2007 11:56:47 AM 198.80.191.38 80 http Failed Connection Attempt firstcall.com 192.168.200.88 anonymous Internal External GET http://198.80.191.38/
what does Req ID: 136dec13; Compression: client=No, server=No, compress rate=0% decompress rate=0% stand for?
error 1006 also show in this line
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 7:45:36 AM
|
|
|
ferrix
Posts: 369
Joined: 16.Mar.2005
Status: offline
|
If you try to connect to the site from a browser on the isa server, does that time out as well? Do you have some routing issue or another firewall after ISA?
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 9:22:20 AM
|
|
|
ogsi
Posts: 47
Joined: 14.Feb.2007
From: New York, NY
Status: offline
|
I did try from the ISA itself, same result
the ISA is the exit point, it is connected to Verizon's internet T1
don't know of any other routing issues, I have no problem accessing other sites of the same vendor
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 9:26:49 AM
|
|
|
ferrix
Posts: 369
Joined: 16.Mar.2005
Status: offline
|
Well I'd go back to watching the traffic out of your ISA then, to prove that it's actually getting out.. see if anything's coming back.
You say that on other exit machines it works? I'm really going out on a limb now, but could it be that the IP of the ISA server is blocked by the web server?
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 9:33:15 AM
|
|
|
ogsi
Posts: 47
Joined: 14.Feb.2007
From: New York, NY
Status: offline
|
don't think that this is the case cause on trace I get to their network (although not right to that specific server)
C:\>tracert publisher.firstcall.com
Tracing route to publisher.firstcall.com [198.80.191.38]
over a maximum of 30 hops:
1 <1 ms <1 ms <1 ms 192.168.200.254
2 <1 ms <1 ms <1 ms isa06.mydomain.com [192.168.200.5]
3 1 ms 1 ms 1 ms 70.x.x.x (***ISA WAN IP***)
4 4 ms 5 ms 25 ms s5-0-2-1-0.edge-rtr4.ny325.verizon-gni.net [70.x.x.x ***Verizon router IP***]
5 159 ms 26 ms 3 ms so-4-0-1-0.core-rtr1.ny325.verizon-gni.net [130.
81.9.89]
6 2 ms 13 ms 4 ms 130.81.20.176
7 18 ms 8 ms 23 ms 0.so-3-1-0.XT1.NYC9.ALTER.NET [152.63.10.37]
8 160 ms 40 ms 48 ms 0.so-5-0-0.XL1.BOS4.ALTER.NET [152.63.16.125]
9 72 ms 81 ms 33 ms POS6-0-0.GW12.BOS4.ALTER.NET [152.63.22.177]
10 * thomson-gw.customer.alter.net [65.194.77.42] reports: Destination
net unreachable.
Trace complete.
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 9:35:42 AM
|
|
|
ferrix
Posts: 369
Joined: 16.Mar.2005
Status: offline
|
You have two conflicting things going on.. it seems that ISA can't connect, yet every indication is that it should connect. Is the problem in the network layer, with your policy rules, or a bug of some kind?
I would first packet trace the outside and rule out the network layer because it's comparatively easy.
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 10:12:02 AM
|
|
|
ogsi
Posts: 47
Joined: 14.Feb.2007
From: New York, NY
Status: offline
|
would hooking a laptop in DMZ and connecting to the site prove taht the problem is ISA?
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 10:31:13 AM
|
|
|
ferrix
Posts: 369
Joined: 16.Mar.2005
Status: offline
|
That would be something to try. Then you could take ISA off and cause the laptop to use the ISA's external IP address, and try that way.
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 1:16:55 PM
|
|
|
ogsi
Posts: 47
Joined: 14.Feb.2007
From: New York, NY
Status: offline
|
ok. laptop at DMZ had no problems getting to taht web site
tracert gave me exact same result
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 1:46:32 PM
|
|
|
ferrix
Posts: 369
Joined: 16.Mar.2005
Status: offline
|
More and more it seems packet sniffing is in order. But I am at the limit of what I can guess on the forum here. That's what Microsoft PSS is for I guess.
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 1:55:28 PM
|
|
|
ogsi
Posts: 47
Joined: 14.Feb.2007
From: New York, NY
Status: offline
|
I'll try the sniffer
maybe other experts have more ideas?
|
|
|
|
|
RE: 0x80074e20 FWX_E_GRACEFUL_SHUTDOWN - 17.Jul.2007 1:57:53 PM
|
|
|
ferrix
Posts: 369
Joined: 16.Mar.2005
Status: offline
|
Oh yes surely! Do not assume because I am the first responding that I am a great expert! I just like to try to help if I can.
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
