• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

How to cause ISA to go to fail state

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> General >> How to cause ISA to go to fail state Page: [1]
Login
Message << Older Topic   Newer Topic >>
How to cause ISA to go to fail state - 11.Mar.2004 12:57:00 AM   
Lambera

 

Posts: 40
Joined: 5.Mar.2004
From: Washington
Status: offline
I know its a wierd request but what are some ways I could make ISA go into fail state. I need to get some screenshots of it and the event logs.

hehe
Thanks
AJ
Post #: 1
RE: How to cause ISA to go to fail state - 11.Mar.2004 1:33:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi AJ,

You might be able to install a poorly designed app that creates a runaway process. Otherwise, I haven't seen it go into a fail state yet.

HTH,
Tom

(in reply to Lambera)
Post #: 2
RE: How to cause ISA to go to fail state - 11.Mar.2004 3:20:00 PM   
Custler

 

Posts: 23
Joined: 24.Feb.2004
From: Moscow, Russia
Status: offline
I can! [Razz] (lowly)

It is simple.
Fist - create new protocol:
IN - with Inbound Primary connection TCP ports 4242, 4661, 4662; UDP ReceiveSend primary connection ports 4665 & 4672; Outbound Secondary connection TCP ports 4242, 4661, 4662; UDP SendReceive Secondary connection ports 4665, 4672.

Second - Create Server publishing rule with this IN protocol: server - 192.168.x.x - from localnet on internal NIC, listen external IP on External NIC, Traffic from "All networks" & "External" TO above local IP, Networks - checked "External" & "All networks".

All outgoing connections for all protocols - enabled. Connection limit - unlimited.

Apply all.

Alls still working fine...

execute on the computer 192.168.x.x the program
"e-mule" (http://prdownloads.sourceforge.net/emule/eMule0.42d-Installer.exe)
and try to connect to any p2p server. For example this one: (ed2k://|server|195.245.244.243|4661|/). And try to download any file.

After few seconds firewall begin close connections with unpredictable result: it can close some connecttions, but leave others. Usually Radmin connection (TCP4899) - alive.
If you try to stop or restart firewall service - it goes to "stopping" state forever. You have to REBOOT.

Any comments?

P.S. I am ready to send you my configs, if it will helpfull. [Wink]

[ March 11, 2004, 03:34 PM: Message edited by: Custler ]

(in reply to Lambera)
Post #: 3
RE: How to cause ISA to go to fail state - 12.Mar.2004 1:45:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Custler,

Good one!

Thanks!
Tom

(in reply to Lambera)
Post #: 4
RE: How to cause ISA to go to fail state - 15.Mar.2004 7:57:00 PM   
Custler

 

Posts: 23
Joined: 24.Feb.2004
From: Moscow, Russia
Status: offline
Have you find out why it crash?

Is it will be solved in ISA 2004 release?

Server protocol rule for crash is more simple now:


(in reply to Lambera)
Post #: 5
RE: How to cause ISA to go to fail state - 15.Mar.2004 11:24:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Custler,

That simple protocol will cause it to crash?

Thanks!
Tom

(in reply to Lambera)
Post #: 6
RE: How to cause ISA to go to fail state - 16.Mar.2004 12:46:00 PM   
Custler

 

Posts: 23
Joined: 24.Feb.2004
From: Moscow, Russia
Status: offline
Protocol TCP and UDP.
You can find Publishing rule ScreenShots at ftp.krn.ru:7564
No Application Filter applied. Port explanation - web page

It's difficult to say at that moment ISA crash:
After first connection established (by e-mule client) to e-mule server and try to start dowload and upload, server start establishing a great many connections (in & out). Especially if you operate with very popular files.

So, I can to suppose that it crash because exceed number of connections. May be it is beta version limitation or a bug, unfortunately.

Before now, I use ISA2000 and it has not such problem.

[ March 16, 2004, 01:43 PM: Message edited by: Custler ]

(in reply to Lambera)
Post #: 7
RE: How to cause ISA to go to fail state - 17.Mar.2004 12:50:00 PM   
Custler

 

Posts: 23
Joined: 24.Feb.2004
From: Moscow, Russia
Status: offline
May be it is a special surprise for peering networks? [Big Grin]

(in reply to Lambera)
Post #: 8
RE: How to cause ISA to go to fail state - 17.Mar.2004 1:19:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Sergey,

Interesting. I guess the next step is to determine the Access Rules and HTTP security filter settings required to block all P2P networks! [Big Grin]

Thanks!
Tom

(in reply to Lambera)
Post #: 9
RE: How to cause ISA to go to fail state - 17.Mar.2004 3:04:00 PM   
Custler

 

Posts: 23
Joined: 24.Feb.2004
From: Moscow, Russia
Status: offline
Yes!
But I want to find out how to do it without bringing FW service into stupid state!

(in reply to Lambera)
Post #: 10
RE: How to cause ISA to go to fail state - 29.Mar.2004 10:12:00 PM   
Hasselper

 

Posts: 1
Joined: 29.Mar.2004
Status: offline
I think you don't have enough NAT entries in ISA Server?
Is there anyone out there who knows how to increase the number?

(in reply to Lambera)
Post #: 11

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> General >> How to cause ISA to go to fail state Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts