Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

grrrrrrr..help

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> General >> grrrrrrr..help Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
grrrrrrr..help - 4.Jan.2006 5:20:39 PM   
ealdridge

 

Posts: 84
Joined: 15.Nov.2005
Status: offline
okay, so this problem is going to do me in... its a Random issue... every now and then when a customer is checking their mail with a pop3 client, it gives a message saying "your connection to the server has been terminitated.." now when i check the logs in the FW.. i get this...

im not sure if its the mail server or the firewall - btw, im running Imail for the email server...

heres the logs, ive replaced the ip address with "ip" .. for better a better viewing experience, ive uploaded this to my server ... as a .txt file :) http://edward.visualcomposer.com/pop3.txt

.      

< Message edited by ealdridge -- 4.Jan.2006 5:22:01 PM >
Post #: 1
RE: grrrrrrr..help - 4.Jan.2006 6:40:32 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi E,

You might want to check out this to see if Stefaan discusses anything that might apply to your situation.

http://www.isaserver.org/articles/ISA2000_POP3Access.html

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ealdridge)
Post #: 2
RE: grrrrrrr..help - 4.Jan.2006 8:29:32 PM   
ealdridge

 

Posts: 84
Joined: 15.Nov.2005
Status: offline
thanks tom ... thanks for getting my hopes up :P

that article MATches EXATCLY to what my issue is.. however.. it wont work on isa 2004, there are no registry keys that match whats in the article..and i also looked at the thread related to that article..and the poster said that it does not work on 2k4

i guess its back to the rat races...


(in reply to tshinder)
Post #: 3
RE: grrrrrrr..help - 4.Jan.2006 8:44:42 PM   
spouseele

 

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi ealdridge,

yep... that article only applies to ISA 2000, although you could use the same methodology to attack your specific problem. In other words, try if you can simulate the problem with the listed command file and if so, take a network monitor trace on the ISA external interface to find out what is really happening on the wire.

HTH,
Stefaan

(in reply to ealdridge)
Post #: 4
RE: grrrrrrr..help - 6.Jan.2006 4:45:34 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:

ORIGINAL: ealdridge

thanks tom ... thanks for getting my hopes up :P

that article MATches EXATCLY to what my issue is.. however.. it wont work on isa 2004, there are no registry keys that match whats in the article..and i also looked at the thread related to that article..and the poster said that it does not work on 2k4

i guess its back to the rat races...




Hi E,
Try out what Stefaan said and let us know what you find. Post the NetMon traces and we'll take a look at them.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ealdridge)
Post #: 5
RE: grrrrrrr..help - 9.Jan.2006 5:02:46 PM   
ealdridge

 

Posts: 84
Joined: 15.Nov.2005
Status: offline
okay, heres a netmon log from the ISA servers external interface, while running that command file from a client machine...

http://edward.visualcomposer.com/netcap.cap

hope this helps....

(in reply to tshinder)
Post #: 6
RE: grrrrrrr..help - 9.Jan.2006 5:06:52 PM   
ealdridge

 

Posts: 84
Joined: 15.Nov.2005
Status: offline
btw..this has moved up to the 2nd teir at MS support.. the first guy ended up not being able to figure it out ....

(in reply to ealdridge)
Post #: 7
RE: grrrrrrr..help - 9.Jan.2006 5:43:07 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:

ORIGINAL: ealdridge

okay, heres a netmon log from the ISA servers external interface, while running that command file from a client machine...

http://edward.visualcomposer.com/netcap.cap

hope this helps....


Hi E,

I'm getting a 404 on that.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ealdridge)
Post #: 8
RE: grrrrrrr..help - 9.Jan.2006 5:43:37 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
quote:

ORIGINAL: ealdridge

btw..this has moved up to the 2nd teir at MS support.. the first guy ended up not being able to figure it out ....


Hi E,

Cool. Let us know what you find out.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ealdridge)
Post #: 9
RE: grrrrrrr..help - 9.Jan.2006 6:42:09 PM   
ealdridge

 

Posts: 84
Joined: 15.Nov.2005
Status: offline
ahh.. heres the correct url...

http://edward.visualcomposer.com/cap/net.zip

-Edward

(in reply to tshinder)
Post #: 10
RE: grrrrrrr..help - 11.Jan.2006 3:52:50 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Edward,

You better take that trace down NOW.

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ealdridge)
Post #: 11
RE: grrrrrrr..help - 11.Jan.2006 4:17:32 PM   
ealdridge

 

Posts: 84
Joined: 15.Nov.2005
Status: offline
quote:

ORIGINAL: tshinder

Hi Edward,

You better take that trace down NOW.

Tom


thanks - its gone...

(in reply to tshinder)
Post #: 12
RE: grrrrrrr..help - 11.Jan.2006 8:29:23 PM   
ealdridge

 

Posts: 84
Joined: 15.Nov.2005
Status: offline
update...

updated the network drivers on the server at 9:50AM

its now 1:30PM -

i havnet had any "failed connection attempts" - yet!..... lets pray that this fixes it....

pfff.. i should have check all network drivers in the first place!

(in reply to ealdridge)
Post #: 13
RE: grrrrrrr..help - 12.Jan.2006 4:55:17 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Edward,

Ha! For performance issues I might have thought about that, but selective POP3 problems? If that ends up being the cause, it'll be great to put that in as a tip in the next newsletter!

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ealdridge)
Post #: 14
RE: grrrrrrr..help - 13.Jan.2006 3:32:55 PM   
ealdridge

 

Posts: 84
Joined: 15.Nov.2005
Status: offline
quote:

ORIGINAL: tshinder

Hi Edward,

Ha! For performance issues I might have thought about that, but selective POP3 problems? If that ends up being the cause, it'll be great to put that in as a tip in the next newsletter!

Thanks!
Tom



wasnt the issue.. but.. .it cant help but to update the network drivers.. i think i have FINALLY solved the issue..(no help from Microsoft though)....

in my POP3 / SMTP rules.. i changed the setting....

on the "TO" tab of the rule......

changed the setting FROM -> requests appear to come from the original CLIENT... TO -> requests appear to come from the ISA server

this has seemed to fix my problem.. i changed the rules yesterday at 9AM and so far (24 hours later) i havent had a SINGLE failure...

this should be a darned sticky for people having this issue :)

-thanks for the help guys!

(in reply to tshinder)
Post #: 15
RE: grrrrrrr..help - 16.Jan.2006 1:49:33 PM   
ealdridge

 

Posts: 84
Joined: 15.Nov.2005
Status: offline
yep the rule was deffo the issue... monday morning..and still no failure's in the logs...

see previous post regarding fix :)

(in reply to ealdridge)
Post #: 16
RE: grrrrrrr..help - 16.Jan.2006 3:40:27 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Edward,

Hmmm. Now its getting interesting again! I wonder if this is an MTU issue? Do you know if Path MTU Discovery is enabled on the ISA firewall?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ealdridge)
Post #: 17
RE: grrrrrrr..help - 16.Jan.2006 4:36:17 PM   
ealdridge

 

Posts: 84
Joined: 15.Nov.2005
Status: offline
quote:

ORIGINAL: tshinder

Hi Edward,

Hmmm. Now its getting interesting again! I wonder if this is an MTU issue? Do you know if Path MTU Discovery is enabled on the ISA firewall?

Thanks!
Tom


hmm... is there a setting in the ISA software or are you referring to the MTU setting in the registry ...

(in reply to tshinder)
Post #: 18
RE: grrrrrrr..help - 16.Jan.2006 5:02:51 PM   
tshinder

 

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Edward,

It's in the Registry of the ISA firewall device. Check Technet for the path and values.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to ealdridge)
Post #: 19
RE: grrrrrrr..help - 16.Jan.2006 7:19:04 PM   
LLigetfa

 

Posts: 2184
Joined: 10.Aug.2004
From: fort frances.on.ca
Status: offline
http://support.microsoft.com/default.aspx?scid=kb;en-us;324270
Set EnablePMTUDiscovery to 1

_____________________________

The School of Hard Knocks is a mean teacher. She gives the exam before the lesson.

(in reply to tshinder)
Post #: 20

Page:   [1] 2   next >   >> << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> General >> grrrrrrr..help Page: [1] 2   next >   >>
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts