Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Published SMTP Server stops responding to inbound connections

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> General >> Published SMTP Server stops responding to inbound connections Page: [1]
Login
Message << Older Topic   Newer Topic >>
Published SMTP Server stops responding to inbound conne... - 22.Mar.2003 1:18:00 PM   
CHKEE750CF

 

Posts: 3
Joined: 22.Mar.2003
From: Atlanta, GA
Status: offline
Hello! I am currently experiencing a weird issue with my ISA firewall. It all of a sudden stops accepting connections to SMTP. I am unable to telnet to port 25 and when I reboot, everything clears up. There are no log entries in the Event logs and I am not sure on where or how ISA logs failed attempts to this service. Any help would be appreciated!

Al Edwards
Post #: 1
RE: Published SMTP Server stops responding to inbound c... - 22.Mar.2003 1:19:00 PM   
CHKEE750CF

 

Posts: 3
Joined: 22.Mar.2003
From: Atlanta, GA
Status: offline
Oh yeah....outbound SMTP works just fine!

(in reply to CHKEE750CF)
Post #: 2
RE: Published SMTP Server stops responding to inbound c... - 26.Mar.2003 9:10:00 PM   
Dr.C

 

Posts: 2
Joined: 26.Mar.2003
From: Georgia
Status: offline
Hi Al,
Have had the same problem. Started last week. We have clustered ISA servers but we shut the failover down and the problem went away. Mail started flowing normally. Now our webproxy service seems to stop whenever it wants to. Have you had any luck with yours?

(in reply to CHKEE750CF)
Post #: 3
RE: Published SMTP Server stops responding to inbound c... - 26.Mar.2003 9:25:00 PM   
CHKEE750CF

 

Posts: 3
Joined: 22.Mar.2003
From: Atlanta, GA
Status: offline
No....it all of a sudden stopped as fast as it started. There is a problem with ports not responding that Microsoft has documentation on, but SP1 is suposed to take care of that. Anyone else experience this problem??

(in reply to CHKEE750CF)
Post #: 4
RE: Published SMTP Server stops responding to inbound c... - 28.Mar.2003 1:13:00 AM   
Daryl O'Berg

 

Posts: 29
Joined: 19.Feb.2002
From: Lake Forest, California
Status: offline
Gents,

I have that exact same problem. SMTP stops allowinf inbound connection to our exchange. Outbound smtp works fine. Cant think of anything aside from the lastest update from MS that has changed which would make this happen. I've re-configured and/or changed nothing. Dr.C Ive left a response to your post about your web proxy stopping on you at random. People on your network wouldn't happen to be using Winamp would they? (ask around, if they are the "shoutcast" protocol could be to blame. (for straming music on the internet.) Accesssable by most players but winamp uses it most.)
This smtp thing buggs me though. Its randomly not responding to incomeing requests and restarting the firewall service clears it up for an indeterminate amount of time.
...i'm still looking. If I find anything on it I'll be sure and let you guys know.

All the best,

Daryl

(in reply to CHKEE750CF)
Post #: 5
RE: Published SMTP Server stops responding to inbound c... - 28.Mar.2003 5:40:00 PM   
dfosbenner

 

Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
I have the exact same problem. I'm running ISA SP1 a year and a half now, no issues on this box, suddenly four times in the last two weeks our Exchange server behind ISA stops receiving mail.

In this broken state, I try TELNET <ip addr> 25 to get to the mail server and I can't get a reply. First time I thought it was a fluke & rebooted ISA. Next time it happened I cycled the firewall service on ISA fixed it.

Went over my ISA and NIC configs with a magnifying glass, then went into the logs and here's what I found:
There are a series of logged events for port 25 that are logged as "Connect" and "Accept" events, and these are present throughout the logs. Suddenly there's a "BIND" event on port 25, and that's when the problem starts - after BIND appears in the log, there are no more ACCEPTs, for port 25, only CONNECTs

Interestingly, the "time taken" entry for the BIND event in the log is exponential - like 133566640 and 171035172 - I did some math with these and got them equal to the down time, so I assume they're milliseconds or something.

When ISA starts, it logs BIND and LISTEN for each port. Well, something is happening to my port 25, it's doing a BIND during the night for some reason and not succeeding, and that's all she wrote.

I did not have MS03-009 installed until after these events started, so I eliminate that. This morning I deleted and recreated my SMTP rule in Server Publishing, just to see if it would fix anything.

That's where I'm at right now.

(in reply to CHKEE750CF)
Post #: 6
RE: Published SMTP Server stops responding to inbound c... - 28.Mar.2003 9:52:00 PM   
dfosbenner

 

Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
If anyone is in a real pinch because of this issue, here's a "workaround":

Make a batch file, e.g. FWCYCLE.BAT which says
net stop "Microsoft Firewall"
net start "Microsoft Firewall"

Put this on your ISA box and use something like the AT command to schedule it to run every hour. At least if SMTP fails and you aren't around, this will start it back up in short order.

-Dave

(in reply to CHKEE750CF)
Post #: 7
RE: Published SMTP Server stops responding to inbound c... - 30.Mar.2003 10:04:00 PM   
jmacneil

 

Posts: 28
Joined: 27.Feb.2002
Status: offline
We had the same problem and found out that if you have explicit deny site and content rules this may cause the issue. The workaround for us was to disable packet filtering and re-enable it.

(in reply to CHKEE750CF)
Post #: 8
RE: Published SMTP Server stops responding to inbound c... - 31.Mar.2003 4:01:00 PM   
dfosbenner

 

Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
I don't have any deny rules anywhere in the Access Policy.

(in reply to CHKEE750CF)
Post #: 9
RE: Published SMTP Server stops responding to inbound c... - 3.Apr.2003 3:47:00 PM   
dfosbenner

 

Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
Well, has anyone come up with anything on this issue? I deleted and recreated my SMTP Server Publishing rule last week, and things worked through this morning, then it crapped out.

In order to get mail flowing again, all I had to do was Disable and Re-enable the SMTP publishing rule.

(in reply to CHKEE750CF)
Post #: 10
RE: Published SMTP Server stops responding to inbound c... - 4.Apr.2003 7:11:00 PM   
dfosbenner

 

Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
I've had it, I opened an MS incident. I need this fixed. They spent an hour on my system see nothing wrong. Next step is to run Netmon twice on ISA, once on each NIC, when it is in a failure state, and try sending mail in and see what happens. Stay tuned.

(in reply to CHKEE750CF)
Post #: 11
RE: Published SMTP Server stops responding to inbound c... - 4.Apr.2003 7:38:00 PM   
skipster

 

Posts: 550
Joined: 12.Oct.2001
From: newport beach
Status: offline
I will be waiting with baited breath on this one.

(in reply to CHKEE750CF)
Post #: 12
RE: Published SMTP Server stops responding to inbound c... - 5.Apr.2003 2:58:00 AM   
Daryl O'Berg

 

Posts: 29
Joined: 19.Feb.2002
From: Lake Forest, California
Status: offline
That makes 2 of us! This one is driving me batty. *sigh* Keeping my fingers crossed...

(in reply to CHKEE750CF)
Post #: 13
RE: Published SMTP Server stops responding to inbound c... - 17.Apr.2003 12:06:00 AM   
Daryl O'Berg

 

Posts: 29
Joined: 19.Feb.2002
From: Lake Forest, California
Status: offline
Greetings all,

Still no luck with a fix for this one. Can't find any info and as we know there are no kind of errors reported, smtp just stops being let through ISA and only a stop andstart of the firewall service clears things up, but only for a day or so. Any fresh ideas out there?
Thanks. I'm sure we'll get to the bottom of this some day.

Daryl O'Berg

(in reply to CHKEE750CF)
Post #: 14
RE: Published SMTP Server stops responding to inbound c... - 17.Apr.2003 3:03:00 PM   
dfosbenner

 

Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
Ever since I opened an incident with Microsoft (2 weeks ago) it hasn't happened since. The case is still open though. I know some who've gone a whole month before it's occurred. This is a needle in the haystack. As soon as I have anything I'll post back here.

(in reply to CHKEE750CF)
Post #: 15
RE: Published SMTP Server stops responding to inbound c... - 2.May2003 5:17:00 PM   
dfosbenner

 

Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
Well folks it has been one month since I initiated an incident with Microsoft on this issue, and I havenÆt had a reoccurrence. This doesnÆt necessarily mean itÆs resolved, as some of you had reoccurrences after a month, but it is possible my problem is fixed. Although no ôfixesö were made to ISA, there were some slight changes made to the DNS at my site, at MicrosoftÆs direction, which may have had an impact on this issue. It may be that thereÆs a flaw in ISA that becomes irrelevant once these DNS changes were made. IÆm going to enumerate what I did so you can compare them to your system.

1. The external NIC on my ISA box had DNS entries that pointed to my ISPÆs DNS server. These were changed to point to my internal DNS servers.
2. Forwarding was not enabled in my DNS configuration. In DNS console, Forwarders tab, check ôEnable forwardersö and add the IP addresses of my ISPÆs DNS servers.
3. On the same screen as step 2, check the ôDo not use recursionö box.

I wish I had something more concrete, but this is it for now.

(in reply to CHKEE750CF)
Post #: 16
RE: Published SMTP Server stops responding to inbound c... - 22.May2003 2:43:00 PM   
dfosbenner

 

Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
Are you guys still having this issue? I went SIX WEEKS trouble free, then BAMM it died twice in six days. I did netmon captures and sent everything to Microsoft. They see what I see - that ISA isn't answering the port 25 requests coming in. The tech is supposed to call me today. I don't think they have a clue on this.

(in reply to CHKEE750CF)
Post #: 17
RE: Published SMTP Server stops responding to inbound c... - 12.Dec.2003 3:31:00 PM   
Milo@icatt.nl

 

Posts: 11
Joined: 5.Dec.2003
Status: offline
Any news on this? I'm having the same issue, however it's happening to my server publishing rules (running at port 80, for incoming web traffic).

My box has quite a bit of traffic flowing through it, and I can't have it crapping out like this.

Just wondering, when opening a case with MS for such an issue, do they charge you if it's a configuration error? How much?

(in reply to CHKEE750CF)
Post #: 18
RE: Published SMTP Server stops responding to inbound c... - 15.Dec.2003 1:43:00 PM   
Milo@icatt.nl

 

Posts: 11
Joined: 5.Dec.2003
Status: offline
Ah, I seem to have found the culprit:

MS KB: Server Publishing Rules Intermittently Fail

I have to wait until of-hours before I can roll-out the patch, but this seems to be the problem. Strangly enough, my wspsrv.exe is dated 11 Feb 2002. Version no. is 3.0.1200.166, not sure however if this is newer/older than 3.0.1200.70.

(in reply to CHKEE750CF)
Post #: 19
RE: Published SMTP Server stops responding to inbound c... - 15.Dec.2003 2:58:00 PM   
Milo@icatt.nl

 

Posts: 11
Joined: 5.Dec.2003
Status: offline
Ah, further investigation proves me wrong: the aformentioned fix is included in ISA SP1, which I had already installed. It seems this is the fix I need:

ISA Server Blocks Incoming Traffic Although a Valid Server Publishing Rule Exists

In a couple of hours I'll install this fix, the following days will tell me wether this has fixed the issue or not.

(in reply to CHKEE750CF)
Post #: 20

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> General >> Published SMTP Server stops responding to inbound connections Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts