Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Firewall log status result codes

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> General >> Firewall log status result codes Page: [1]
Login
Message << Older Topic   Newer Topic >>
Firewall log status result codes - 10.Feb.2004 12:14:00 AM   
Persing

 

Posts: 40
Joined: 31.Jan.2004
Status: offline
Most of the result codes I get in denied traffic are 0xc0040017 and 0xc004000D. The help is no help. They talk genrally about values of less than 100, 100 to 1000, and 10,000 to 11,004. And even then there is no exhaustive list. ISA2000 isn't too bad in this area. At least most of the codes are in the help file. Does anyone know where I can find a list, or at least tell me what these 2 mean?
Post #: 1
RE: Firewall log status result codes - 10.Feb.2004 5:35:00 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Pete,

What kinds of problems are you having? What's not working for you? Maybe we can approach that problem that way, and reverse engineer the codes [Big Grin]

Thanks!
Tom

(in reply to Persing)
Post #: 2
RE: Firewall log status result codes - 10.Feb.2004 1:58:00 PM   
Persing

 

Posts: 40
Joined: 31.Jan.2004
Status: offline
This is the same problem I mentioned the other day in "Access Policies". When I set up a test and run for a little while everything seems to work ok, but I get random "denied" messages in the firewall log. Some are definitely associated with mail that was successfully sent or received, (port 25) and others associated with web sites that were successfully visited (port 80). It is as if in the exchange of data, some responses that should have been routed back to the Exchange server or the web client are instead coming back to the local host itself and being denied as "Unidentified traffic". It would make the diagnosis of these problems much easier if we had a list of error codes. All the codes begin with 0xc00... such as oxc0040017.

(in reply to Persing)
Post #: 3
RE: Firewall log status result codes - 10.Feb.2004 2:07:00 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Pete,

Is the mail server publishing rule the only rule you have on the machine? Could there be network delays that are causing timing issues? Could it be a beta bug [Smile]

thanks!
Tom

(in reply to Persing)
Post #: 4
RE: Firewall log status result codes - 10.Feb.2004 3:25:00 PM   
Persing

 

Posts: 40
Joined: 31.Jan.2004
Status: offline
No, I have published Web server, OWA, FTP and others. But during the test the mail server is the only one with any appreciable traffic. I will start stripping things down and run some more tests. Let us know if you get a list of error codes.

(in reply to Persing)
Post #: 5
RE: Firewall log status result codes - 14.Feb.2004 1:36:00 AM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Pete,

Will do. If you want me to take a look at your config, you can make a backup and zip it and send it to tshinder@isaserver.org.

HTH,
Tom

(in reply to Persing)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> General >> Firewall log status result codes Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts