• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA stops passing traffic for no reason

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> Web Publishing >> ISA stops passing traffic for no reason Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA stops passing traffic for no reason - 20.Dec.2006 1:07:17 PM   
acausemaker

 

Posts: 43
Joined: 3.Mar.2005
Status: offline
my ISA2004 server (running on W2K3 Std) seems to stop passing ANY traffic at random times, therefore killing all of my public websites.  the only solution is to reboot the ISA server.  It's driving me insane.. I've checked my publishing rules over and over, deleted them and recreated them, and the only thing that works is a reboot.  No errors in the eveng log, no errors anywhere else.

right now they're working fine, but usually in the morning when I get to the office, I have to reboot the server for the publishing rules to work.  In the monitoring, I see the traffic coming in from the external IP's to the public IP on the ISA server, but it never gets any further.  I can browse the website on the ISA server itself, but not from outside the ISA server.

it's infuriating, I've been working with ISA for 3 years now and never had this happen.  any suggesitons?  they're just regular websites, running over port 80.
Post #: 1
RE: ISA stops passing traffic for no reason - 20.Dec.2006 2:23:15 PM   
tmill2004

 

Posts: 12
Joined: 15.Dec.2006
Status: offline
I have the same problem but it is when my machine is doing backups and it was killing the firewall service.  When it happens check the microsoft firewall service and see if it is started. If not start it and see if that prevents you from rebooting. if thats the case you can go into the properties and set the service to restart if fails. Of course it's good to find out what is causing it to fail.....good luck

Ted

(in reply to acausemaker)
Post #: 2
RE: ISA stops passing traffic for no reason - 20.Dec.2006 2:42:30 PM   
acausemaker

 

Posts: 43
Joined: 3.Mar.2005
Status: offline
the Microsoft Firewall service is still running, this isn't just when my backups are running (i don't back up my ISA server anyway)... so far it's happened 3 TIMES today, I've had to reboot the #$#%^%# thing. 

I changed cables, and also turned off the "allow the computer to turn of this device to save power" option on both the Internal and External NICs... it dang well better make a difference!!! (can you tell i'm frustrated????)

(in reply to tmill2004)
Post #: 3
RE: ISA stops passing traffic for no reason - 21.Dec.2006 1:49:41 PM   
acausemaker

 

Posts: 43
Joined: 3.Mar.2005
Status: offline
well when I got in this morning, my websites were up so I thought all was well... but I get back from lunch this afternoon and guess what - sites no worky worky again. 

here's a brief overview of my ISA logs when isa works:
original client IP: 0.0.0.0
service: reverse proxy
server name :  myisaserver
destination host name:  mywebsite.com
source port: 0
destination IP:  192.168.0.170 (internal IP of my webserver)
action: allowed connection
rule:  mywebsite.com
client IP:  Ip address of the computer I"m using to test access to the sites
source network: external
http method:  GET
URL:  http://192.168.0.170/blah/blah.gif

here's the logs when ISA stops responding to requests:
origianl client IP: public IP of the computer I'm using to test access to the sites
service:  <blank>
server name:  myisaserver
destination host name:  <blank>
source port: 51236/51221 (varying numbers here)
destination IP:  public IP of my external NIC on ISA
action:  initiated connection (then later, it will be closed connection)
rule:  <blank>
clietn IP:  IP address of the computer I"m using to test access to the sites
destination network:  LocalHost
HTTP method:  <blank>
URL:  <blank>

in the top logs, the incoming request is reverse proxied from the external requestor to the internal IP of my webserver, and everything is great.  but in the bottom logs (when the sites aren't working), it's like the request is just not being processed at all... ISA just drops the request like a bad packet.

ANY advice or suggestions would be greatly appreciated.  Thanks,

< Message edited by acausemaker -- 21.Dec.2006 1:59:14 PM >

(in reply to acausemaker)
Post #: 4
RE: ISA stops passing traffic for no reason - 28.Dec.2006 3:55:27 PM   
acausemaker

 

Posts: 43
Joined: 3.Mar.2005
Status: offline
I ran the fwengmon tool on my ISA server when it stopped publishing my sites and here's what I got:

C:\fwengmon>fwengmon /c
Creation Objects:
ID Protocol Source Destination One-Shot
-- -------- ------ ----------- --------
4 TCP(6) 0.0.0.0:0 192.168.0.24:80 No
1 TCP(6) 0.0.0.0:0 192.168.0.24:1745 No
2 TCP(6) 0.0.0.0:0 192.168.0.24:8080 No
3 TCP(6) 0.0.0.0:0 xx.xx.200.114:80 No
5 TCP(6) 0.0.0.0:0 xx.xx.200.114:1935 No
5 Creations.

C:\fwengmon>fwengmon /s
Active Sessions:
Source / Destination /
ID Protocol Source Proxy Dest. Proxy 2-way Timeout
-- -------- ----------- ------------ ----- -------
1017 UDP(17) 192.168.0.24:137 192.168.0.4:137 Yes Yes
1018 UDP(17) 192.168.0.24:137 192.168.0.5:137 Yes Yes
1006 TCP(6) 192.168.0.24:1561 192.168.0.200:139 Yes Yes
927 TCP(6) 64.230.0.69:4065 xx.xx.200.114:1935 Yes Yes
192.168.0.170:1935
1001 TCP(6) 192.168.0.200:3502 192.168.0.24:3389 Yes Yes
1016 TCP(6) yyy.yyy.181.101:35102 xx.xx.200.114:80 Yes Yes
1019 TCP(6) yyy.yyy.181.101:35120 xx.xx.200.114:80 Yes Yes
1020 TCP(6) yyy.yyy.181.101:35126 xx.xx.200.114:80 Yes Yes
1021 TCP(6) yyy.yyy.181.101:35143 xx.xx.200.114:80 Yes Yes
9 Connections.

if somebody, ANYBODY could shed any light on this it would be greatly appreciated.  it's not happening as often now, but it's still happening and it definitely ain't supposed to do this!!

thanks,
Andi

(in reply to acausemaker)
Post #: 5
RE: ISA stops passing traffic for no reason - 11.Jan.2007 10:20:43 AM   
Boedus

 

Posts: 195
Joined: 8.Sep.2006
Status: offline
If the number of reqests if is too high at any stage to the ISA Server, it will stay up and running but will drop the connections.
This can be tweaked in the general settings and the number can be increased.
This feature has been designed to avoid the firewall to get attacked by some robots over a long period.

Remember that if one guy only goes to one website only he might do over 200 requests.

Sorry don't have an ISA under my hands atm, so I do not remember the default value and the exact field name but you should be able to find it easily.

(in reply to acausemaker)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> Web Publishing >> ISA stops passing traffic for no reason Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts