• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

421 Service not available, closing transmission channel

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 General] >> General >> 421 Service not available, closing transmission channel Page: [1]
Login
Message << Older Topic   Newer Topic >>
421 Service not available, closing transmission channel - 24.Sep.2008 3:42:58 AM   
david.parker@practiv.com

 

Posts: 8
Joined: 14.Aug.2005
From: Auckland NZ
Status: offline
Greetings All,

I have 3 ISA servers in play, 2 as ISA2004 and a new ISA2006 which has Exch2007 behind it.

I have an outstanding email issue where I am unable to send emails to ONE domain only which is routing via ISA2006.

From a ISA2004 box, I can open telnet randsomservername.com 25 and get a valid smtp handshake. I am also able to open a telnet test to our new client and get a valid smtp header.

From the ISA2006 box, I can open telnet randsomserver.com 25 and get a valid smtp header.  I do the same telnet command, but to our new client and the host returns the "421 Service not available, closing transmission channel".

Is this a ISA issue that it works on ISA2004 but not ISA2006, and only fails for one client. Any ideas what im missing. Ive spent close to a working day to break this issue backwards from exchange through mailmarshal through to the ISA2006 issue.

Regards
Dave

< Message edited by david.parker@practiv.com -- 24.Sep.2008 4:06:17 AM >
Post #: 1
RE: 421 Service not available, closing transmission cha... - 24.Sep.2008 9:06:58 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi David,

What do you mean by it failing for only one client? Clients wouldn't be forwarding mail to external SMTP servers.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to david.parker@practiv.com)
Post #: 2
RE: 421 Service not available, closing transmission cha... - 24.Sep.2008 3:45:09 PM   
david.parker@practiv.com

 

Posts: 8
Joined: 14.Aug.2005
From: Auckland NZ
Status: offline
Greetings Tom, thanks for the reply. I'll hopefully clarify a little.

I have a isa2006ee server running w2k3, exchange 2007 server running server 2008 with mailmarshal on w2k3.

Outbound emails are routed from exchange through mailmarshall through to isa2006. (this is a new exchange2007/isa2006 install to convert my company away from mdaemon) I was informed that one of our clients (another domain) wasnt receiving emails and I further found that these emails were stuck on mailmarshals outbound routes.

During the diag process, I found using just pure CMD and Telnet, I wasn’t able to open a successful connection to this domain from the server hosting mailmarshall. (to any other domain works okay). I tried this same process on the isa2006 server and got the same 421 Service not available fault.

On one of the other isa2004 servers, I tried the same telnet to this domain and any other domain, and the connection worked as expected.

On the isa2006, I swapped the primary IP with another spare to see if this domain that I was trying to send emails to, had some sort of IP blocking going on, but this action gave back the same 421 failed result.

So in the end I have a is2004 and isa2006 server where the isa2004 will work as expected to any domain, and then the isa2006 will work to any domain except one.
Unfortunately this one domain is a new and large client for the company I work for. :o/ 

Dave

(in reply to tshinder)
Post #: 3
RE: 421 Service not available, closing transmission cha... - 29.Sep.2008 8:51:41 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Dave,

Can you tell me the domain that telnet 25 doesn't work to?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to david.parker@practiv.com)
Post #: 4
RE: 421 Service not available, closing transmission cha... - 30.Sep.2008 3:24:46 PM   
david.parker@practiv.com

 

Posts: 8
Joined: 14.Aug.2005
From: Auckland NZ
Status: offline
Greetings Tom,

The issue affecting this connection has been resolved. Not by me, nor do I know how.

The server in question is "envoy.telecom.co.nz".

I was all prepared on the weekend to build another server to see if it was something that had gone amiss during the build/config of the isa2006 install. On arrival, for the weekend rebuild, I did the same Telnet test, and all the emails were/are flowing as one should except. why did it stop, i'm sorry, I have yet to find out.

With Google and "421 service not available", I was never able to find a solution and im sorry that im not able to provide an answer to someone else that has found this posting.

As you have probably seen many times, being stuck in the middle with lots of finger pointing is never a fun place to be.

I can say though, its not ISA that was ever at fault.

Thanks for your time
Dave

(in reply to tshinder)
Post #: 5
RE: 421 Service not available, closing transmission cha... - 1.Oct.2008 7:17:30 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Dave,

Thanks for the follow up!

In fact, in my 10 years of experience with the ISA firewall, over 95% of the time it's not the ISA firewall's fault. It's typically some Cisco CLI or *IX junkie who messed up a configuration with a typo.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to david.parker@practiv.com)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 General] >> General >> 421 Service not available, closing transmission channel Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts