Welcome to ISAserver.org

0xc0040014 spoofing denied

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Exchange Publishing >> 0xc0040014 spoofing denied

Page: [1]

Message

<< Older Topic Newer Topic >>

0xc0040014 spoofing denied - 19.Aug.2007 9:25:18 AM

ismail.mohammed

Posts: 6
Joined: 19.Aug.2007
Status: offline

hi,
I am doing some test to publish my 5.5 owa
Domain 1 having windows 2003, exchange 5.5. in windows 200 and one isa 2004 on windows 2003 (isa is in a workgroup)
Isa has two nic card
One is called as private and another one called as public

C:\Documents and Settings\Administrator>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : isaserver
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
Ethernet adapter Private:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter
Physical Address. . . . . . . . . : 00-0C-29-20-0D-62
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.20.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.20.1
172.20.2.41
Ethernet adapter Public:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter #2
Physical Address. . . . . . . . . : 00-0C-29-20-0D-6C
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 172.20.2.40
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 172.20.2.41
DNS Servers . . . . . . . . . . . : 172.20.2.41
192 is private one and public is 172
Now when i try to ping one of my server which is 172.20.2.41 it is working fine and if i try to ping isa server from .41 it is showing request timed out.
> If i stop microsoft firewall service then it is replying
> in the monitoring it showing 0xc0040014 spoofing denied
Any help would be greatly appreciated i am totally newbie for isa

Post #: 1

Featured Links*

RE: 0xc0040014 spoofing denied - 19.Aug.2007 12:16:30 PM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

The ISA Firewall doesn't allow pings to any of its interfaces by default.

However, if you're seeing spoofed messages, it indicates your ISA Firewall Networks are not configured correctly.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ismail.mohammed)

Post #: 2

RE: 0xc0040014 spoofing denied - 20.Aug.2007 1:39:16 AM

ismail.mohammed

Posts: 6
Joined: 19.Aug.2007
Status: offline

thanks for your reply tshinder and clarifying my doubt.
But i don't understand why my external server is not responding for accessing my exchange outlook webaccess and i am clueless.
Just i need to publish my http url of exchange 5.5 could you please refer any good document.

(in reply to tshinder)

Post #: 3

RE: 0xc0040014 spoofing denied - 20.Aug.2007 9:08:27 AM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

We don't have any docs on publishing Exchange 5.5 -- it's many years out of support.

You might try SSL to HTTP bridging, but I don't know if that'll work. Give it a try.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ismail.mohammed)

Post #: 4

RE: 0xc0040014 spoofing denied - 21.Aug.2007 1:15:28 AM

ismail.mohammed

Posts: 6
Joined: 19.Aug.2007
Status: offline

hi,

Thanks for your consideration on my issue

I have resolved the exchange 5.5 query and i am able to ping out. just i enabled ip routing to resolve my query
Now i bought exchange 2003 server and i am able to work on owa internally with friendly url. with SSL certificate installed
i am following the below url to publish my https owa
http://www.isaserver.org/tutorials/2004owafba.html

now when i am configuring listener with SSL port it is giving an error message
"To select a certificate, you must install at least one identical certificate on each member server"

i have installed IIS, certificate service on isa and even i have exported the certificate and private key. Under personal i am able to see my certificate. Tried to reboot the server and firewall it doesn't seem to resolving my query

Pls help me out

(in reply to tshinder)

Post #: 5

RE: 0xc0040014 spoofing denied - 21.Aug.2007 1:45:22 AM

ismail.mohammed

Posts: 6
Joined: 19.Aug.2007
Status: offline

hi tom,

Finally i am able to resolve the https.
I have cleaned all the ceritificates and restarted it back from scratch, i believe private key was causing the problem

now i am able to have https access.

I have one question for you,
we have cisco pix firewall in production environment and we need to redirect http to https from cisco pix do you have idea how to do it because i am very much poor in cisco pix

(in reply to ismail.mohammed)

Post #: 6

RE: 0xc0040014 spoofing denied - 21.Aug.2007 11:56:14 AM

tshinder

Posts: 47644
Joined: 10.Jan.2001
From: Texas
Status: offline

You should just allow all HTTP and HTTPS traffic inbound to the ISA Firewall at the PIX. As how to configure that, you'll have to check the pix docs or use the PDM.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ismail.mohammed)

Post #: 7