Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
Published SMTP Server stops responding to inbound connections
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login | |
|
Published SMTP Server stops responding to inbound conne... - 22.Mar.2003 1:18:00 PM
|
|
|
CHKEE750CF
Posts: 3
Joined: 22.Mar.2003
From: Atlanta, GA
Status: offline
|
Hello! I am currently experiencing a weird issue with my ISA firewall. It all of a sudden stops accepting connections to SMTP. I am unable to telnet to port 25 and when I reboot, everything clears up. There are no log entries in the Event logs and I am not sure on where or how ISA logs failed attempts to this service. Any help would be appreciated!
Al Edwards
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 22.Mar.2003 1:19:00 PM
|
|
|
CHKEE750CF
Posts: 3
Joined: 22.Mar.2003
From: Atlanta, GA
Status: offline
|
Oh yeah....outbound SMTP works just fine!
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 26.Mar.2003 9:10:00 PM
|
|
|
Dr.C
Posts: 2
Joined: 26.Mar.2003
From: Georgia
Status: offline
|
Hi Al, Have had the same problem. Started last week. We have clustered ISA servers but we shut the failover down and the problem went away. Mail started flowing normally. Now our webproxy service seems to stop whenever it wants to. Have you had any luck with yours?
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 26.Mar.2003 9:25:00 PM
|
|
|
CHKEE750CF
Posts: 3
Joined: 22.Mar.2003
From: Atlanta, GA
Status: offline
|
No....it all of a sudden stopped as fast as it started. There is a problem with ports not responding that Microsoft has documentation on, but SP1 is suposed to take care of that. Anyone else experience this problem??
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 28.Mar.2003 1:13:00 AM
|
|
|
Daryl O'Berg
Posts: 29
Joined: 19.Feb.2002
From: Lake Forest, California
Status: offline
|
Gents,
I have that exact same problem. SMTP stops allowinf inbound connection to our exchange. Outbound smtp works fine. Cant think of anything aside from the lastest update from MS that has changed which would make this happen. I've re-configured and/or changed nothing. Dr.C Ive left a response to your post about your web proxy stopping on you at random. People on your network wouldn't happen to be using Winamp would they? (ask around, if they are the "shoutcast" protocol could be to blame. (for straming music on the internet.) Accesssable by most players but winamp uses it most.) This smtp thing buggs me though. Its randomly not responding to incomeing requests and restarting the firewall service clears it up for an indeterminate amount of time. ...i'm still looking. If I find anything on it I'll be sure and let you guys know.
All the best,
Daryl
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 28.Mar.2003 5:40:00 PM
|
|
|
dfosbenner
Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
|
I have the exact same problem. I'm running ISA SP1 a year and a half now, no issues on this box, suddenly four times in the last two weeks our Exchange server behind ISA stops receiving mail.
In this broken state, I try TELNET <ip addr> 25 to get to the mail server and I can't get a reply. First time I thought it was a fluke & rebooted ISA. Next time it happened I cycled the firewall service on ISA fixed it.
Went over my ISA and NIC configs with a magnifying glass, then went into the logs and here's what I found: There are a series of logged events for port 25 that are logged as "Connect" and "Accept" events, and these are present throughout the logs. Suddenly there's a "BIND" event on port 25, and that's when the problem starts - after BIND appears in the log, there are no more ACCEPTs, for port 25, only CONNECTs
Interestingly, the "time taken" entry for the BIND event in the log is exponential - like 133566640 and 171035172 - I did some math with these and got them equal to the down time, so I assume they're milliseconds or something.
When ISA starts, it logs BIND and LISTEN for each port. Well, something is happening to my port 25, it's doing a BIND during the night for some reason and not succeeding, and that's all she wrote.
I did not have MS03-009 installed until after these events started, so I eliminate that. This morning I deleted and recreated my SMTP rule in Server Publishing, just to see if it would fix anything.
That's where I'm at right now.
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 28.Mar.2003 9:52:00 PM
|
|
|
dfosbenner
Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
|
If anyone is in a real pinch because of this issue, here's a "workaround":
Make a batch file, e.g. FWCYCLE.BAT which says net stop "Microsoft Firewall" net start "Microsoft Firewall"
Put this on your ISA box and use something like the AT command to schedule it to run every hour. At least if SMTP fails and you aren't around, this will start it back up in short order.
-Dave
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 30.Mar.2003 10:04:00 PM
|
|
|
jmacneil
Posts: 28
Joined: 27.Feb.2002
Status: offline
|
We had the same problem and found out that if you have explicit deny site and content rules this may cause the issue. The workaround for us was to disable packet filtering and re-enable it.
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 31.Mar.2003 4:01:00 PM
|
|
|
dfosbenner
Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
|
I don't have any deny rules anywhere in the Access Policy.
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 3.Apr.2003 3:47:00 PM
|
|
|
dfosbenner
Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
|
Well, has anyone come up with anything on this issue? I deleted and recreated my SMTP Server Publishing rule last week, and things worked through this morning, then it crapped out.
In order to get mail flowing again, all I had to do was Disable and Re-enable the SMTP publishing rule.
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 4.Apr.2003 7:11:00 PM
|
|
|
dfosbenner
Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
|
I've had it, I opened an MS incident. I need this fixed. They spent an hour on my system see nothing wrong. Next step is to run Netmon twice on ISA, once on each NIC, when it is in a failure state, and try sending mail in and see what happens. Stay tuned.
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 4.Apr.2003 7:38:00 PM
|
|
|
skipster
Posts: 550
Joined: 12.Oct.2001
From: newport beach
Status: offline
|
I will be waiting with baited breath on this one.
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 5.Apr.2003 2:58:00 AM
|
|
|
Daryl O'Berg
Posts: 29
Joined: 19.Feb.2002
From: Lake Forest, California
Status: offline
|
That makes 2 of us! This one is driving me batty. *sigh* Keeping my fingers crossed...
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 17.Apr.2003 12:06:00 AM
|
|
|
Daryl O'Berg
Posts: 29
Joined: 19.Feb.2002
From: Lake Forest, California
Status: offline
|
Greetings all,
Still no luck with a fix for this one. Can't find any info and as we know there are no kind of errors reported, smtp just stops being let through ISA and only a stop andstart of the firewall service clears things up, but only for a day or so. Any fresh ideas out there? Thanks. I'm sure we'll get to the bottom of this some day.
Daryl O'Berg
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 17.Apr.2003 3:03:00 PM
|
|
|
dfosbenner
Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
|
Ever since I opened an incident with Microsoft (2 weeks ago) it hasn't happened since. The case is still open though. I know some who've gone a whole month before it's occurred. This is a needle in the haystack. As soon as I have anything I'll post back here.
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 2.May2003 5:17:00 PM
|
|
|
dfosbenner
Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
|
Well folks it has been one month since I initiated an incident with Microsoft on this issue, and I havenÆt had a reoccurrence. This doesnÆt necessarily mean itÆs resolved, as some of you had reoccurrences after a month, but it is possible my problem is fixed. Although no ôfixesö were made to ISA, there were some slight changes made to the DNS at my site, at MicrosoftÆs direction, which may have had an impact on this issue. It may be that thereÆs a flaw in ISA that becomes irrelevant once these DNS changes were made. IÆm going to enumerate what I did so you can compare them to your system.
1. The external NIC on my ISA box had DNS entries that pointed to my ISPÆs DNS server. These were changed to point to my internal DNS servers. 2. Forwarding was not enabled in my DNS configuration. In DNS console, Forwarders tab, check ôEnable forwardersö and add the IP addresses of my ISPÆs DNS servers. 3. On the same screen as step 2, check the ôDo not use recursionö box.
I wish I had something more concrete, but this is it for now.
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 22.May2003 2:43:00 PM
|
|
|
dfosbenner
Posts: 116
Joined: 14.Nov.2001
From: Maybrook, NY USA
Status: offline
|
Are you guys still having this issue? I went SIX WEEKS trouble free, then BAMM it died twice in six days. I did netmon captures and sent everything to Microsoft. They see what I see - that ISA isn't answering the port 25 requests coming in. The tech is supposed to call me today. I don't think they have a clue on this.
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 12.Dec.2003 3:31:00 PM
|
|
|
Milo@icatt.nl
Posts: 11
Joined: 5.Dec.2003
Status: offline
|
Any news on this? I'm having the same issue, however it's happening to my server publishing rules (running at port 80, for incoming web traffic).
My box has quite a bit of traffic flowing through it, and I can't have it crapping out like this.
Just wondering, when opening a case with MS for such an issue, do they charge you if it's a configuration error? How much?
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 15.Dec.2003 1:43:00 PM
|
|
|
Milo@icatt.nl
Posts: 11
Joined: 5.Dec.2003
Status: offline
|
Ah, I seem to have found the culprit:
MS KB: Server Publishing Rules Intermittently Fail
I have to wait until of-hours before I can roll-out the patch, but this seems to be the problem. Strangly enough, my wspsrv.exe is dated 11 Feb 2002. Version no. is 3.0.1200.166, not sure however if this is newer/older than 3.0.1200.70.
|
|
|
|
RE: Published SMTP Server stops responding to inbound c... - 15.Dec.2003 2:58:00 PM
|
|
|
Milo@icatt.nl
Posts: 11
Joined: 5.Dec.2003
Status: offline
|
Ah, further investigation proves me wrong: the aformentioned fix is included in ISA SP1, which I had already installed. It seems this is the fix I need:
ISA Server Blocks Incoming Traffic Although a Valid Server Publishing Rule Exists
In a couple of hours I'll install this fix, the following days will tell me wether this has fixed the issue or not.
|
|
|
|
New Messages |
No New Messages |
Hot Topic w/ New Messages |
Hot Topic w/o New Messages |
Locked w/ New Messages |
Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|