• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Restart ISA service twice a day, access stops. POP and Internet outbound stops

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 Firewall] >> General >> Restart ISA service twice a day, access stops. POP and Internet outbound stops Page: [1]
Login
Message << Older Topic   Newer Topic >>
Restart ISA service twice a day, access stops. POP and... - 18.Aug.2007 2:20:30 PM   
dmanzano

 

Posts: 5
Joined: 6.Aug.2007
Status: offline
Hi All,

I have switched our email to external pop accounts and now I have to restart ISA server twice a day.  I have read this article:http://www.isaserver.org/articles/ISA2000_POP3Access.html, but, this uses the firewall client, which I am not using.  Here is my set up:
dsl modem--> netopia router with secureNAT turned on --> Windows2003 server/ISA 2000 server --> clients.

This setup was working fine until I started using an offsite vendor for our email.  IT looks like the polling nature of POP is just making an existing problem worse.  I am thinking of replacing the netopia with a plain netgear router/firewall and turning off the secureNAT.  We don't need it, it was there when I started working here.  Any suggestions.  My clients are not too happy :-).

Thanks,
Don
Post #: 1
RE: Restart ISA service twice a day, access stops. POP... - 18.Aug.2007 6:31:56 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Don,

some questions:

1. at the time the POP3 access is failing, is there anything reported in the ISA logs and/or the Windows event log?

2. do you really need to restart the ISA server or only the Firewall service?

3. when you place a workstation on the same segment as the ISA external interface, do you see the same problems?

4. do you run the latest ISA 2000 service packs (FP1 + SP2)?

5. to exclude any client program failure, can you reproduce the problem with the simple command file mentioned in my article The Mystery of the failing POP3 Access with ISA 2000 ?

6. ....

HTH,
Stefaan

(in reply to dmanzano)
Post #: 2
RE: Restart ISA service twice a day, access stops. POP... - 18.Aug.2007 6:54:19 PM   
dmanzano

 

Posts: 5
Joined: 6.Aug.2007
Status: offline
Hi,
Thanks so much for replying to my post.
1. at the time the POP3 access is failing, is there anything reported in the ISA logs and/or the Windows event log? <-- nothing in the ISA log (which I had to turn on) and nothing in the Window event log.
2. do you really need to restart the ISA server or only the Firewall service? <-- I have been restarting the ISA service.  When I click on restart it asks me if I want to restart the firewall service as well.
3. when you place a workstation on the same segment as the ISA external interface, do you see the same problems?  <-- I have not tryed that.  I should have now that you say it.  When we have the problem, we restart the ISA service to get everyone back up and running.  I will try that.
4. do you run the latest ISA 2000 service packs (FP1 + SP2)? <-- How do you check if you have FP1?  Do you have a link where I can download it?
5. to exclude any client program failure, can you reproduce the problem with the simple command file mentioned in my article The Mystery of the failing POP3 Access with ISA 2000 ? <-- when the problem is happening, yes. --- Begin ---
echo off
:Start
netsh diag connect iphost FQDN 110
GOTO Start
--- End ---

6. There is something that is interesting about this env. I'm new here. The clients are not running the firewall client, and they are not running the secureNAT. But the cheap looking Netopia router is set to SecureNAT. I was going to swap out the netopia for netgear to see if the problem may be between the Win2k server and the Netopia router.
When I restart the ISA service, that of course, releases any port issues between the external interface and the netopia, and it flushes the client connections on the internal interface.
So with the replacement router I was going to not turn on secureNAT. There is no reason for it in this shop since I just moved our DNS record (MX record and all) and our website to an external vendor, Network Solutions.

Thanks a million,
Don

(in reply to spouseele)
Post #: 3
RE: Restart ISA service twice a day, access stops. POP... - 19.Aug.2007 5:43:05 AM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Don,

1. OK.

2. OK.

3. Waiting for the result of this test.

4. http://www.microsoft.com/technet/isa/downloads/2000/default.mspx

5. OK.

6. Hmm... indeed something strange!
quote:

clients are not running the firewall client, and they are not running the secureNAT.

Please post the result of the following commands *unmodified*:
- ipconfig /all on ISA
- route print on ISA
- ipconfig /all on an internal workstation (POP3 client)
- route print on an internal workstation (POP3 client)

Note: if you like to keep the above info private, send me a private message with that information.

HTH,
Stefaan

< Message edited by spouseele -- 19.Aug.2007 6:34:57 AM >

(in reply to dmanzano)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 Firewall] >> General >> Restart ISA service twice a day, access stops. POP and Internet outbound stops Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts