Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
RE: Internet Access still stopping ...
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login | |
|
RE: Internet Access still stopping ... - 10.Apr.2002 9:07:00 PM
|
|
|
jmargel
Posts: 72
Joined: 3.Apr.2002
Status: offline
|
btw.. it fixed my ftp problem as well. seems like SP1 fixes a problem that the server has w/ opening ports
|
|
|
|
RE: Internet Access still stopping ... - 10.Apr.2002 10:19:00 PM
|
|
|
msgelinas
Posts: 79
Joined: 21.Sep.2001
From: Victoria,BC,Canada
Status: offline
|
quote: Originally posted by jmargel: Try this:
From your internal DNS server, do a nslookup from the command prompt. Does it resolve to the ISP's DNS server? Mine isn't, but I can reach web sites. My email is backing up (my exchange & dns server are the same machines, sitting behind a ISA firewall)
I noticed in my firewall logs, that its blocking port 53 to my ISP's DNS server, yet I have that port open. Please help! I can reach the ISP dns server from my firewall though.
What steps did you do to open the Port for external DNS resolution ?
|
|
|
|
RE: Internet Access still stopping ... - 11.Apr.2002 5:13:00 AM
|
|
|
jmargel
Posts: 72
Joined: 3.Apr.2002
Status: offline
|
In my tcp/ip properties of my DNS server, I have my ISP DNS listed as the first DNS entry. You'll have to reboot after you do this. Then do a nslookup from a command prompt & you should see your ISP's DNS server. I had to do this to resolve names to IPs since my DNS server is also my exchange server. Otherwise my messages would just sit in the queue.
Also on my ISA, I enabled the DNS query pass-through, pointing to my internal DNS. Not sure if that played a role or not. [ April 11, 2002, 05:15 AM: Message edited by: jmargel ]
|
|
|
|
RE: Internet Access still stopping ... - 12.Apr.2002 5:47:00 PM
|
|
|
msgelinas
Posts: 79
Joined: 21.Sep.2001
From: Victoria,BC,Canada
Status: offline
|
So you have an Internal DNS Server that handles the DNS for your LAN then the Internal forwards out to your ISPs DNS Server for Internet resolution ? [ April 12, 2002, 05:54 PM: Message edited by: msgelinas ]
|
|
|
|
RE: Internet Access still stopping ... - 12.Apr.2002 10:01:00 PM
|
|
|
jmargel
Posts: 72
Joined: 3.Apr.2002
Status: offline
|
Yes.. Well kinda.. Here is my setup:
Internet | ISA Server | Internal DNS Server & Exchange Server (both exchange & DNS are on the same box)
In my TCP/IP properties, on my DNS Server I have the first entry pointing to my ISP's DNS Server. I also have my first gateway as my ISA's internal nic IP. So when I goto a command prompt & type nslookup it will show my ISP's DNS server.
Now, all my clients are have an entry in the tcp/ip properties under dns, pointing to my internal DNS server.
I have a pop3 & smtp rule on my ISA to point to my internal exchange server to allow email.
Hope this helps. [ April 12, 2002, 10:05 PM: Message edited by: jmargel ]
|
|
|
|
RE: Internet Access still stopping ... - 15.Apr.2002 4:53:00 PM
|
|
|
jmargel
Posts: 72
Joined: 3.Apr.2002
Status: offline
|
Ya know.. there are strange problems out there.. I highly doubt this is related, but users from different ISPs are getting this:
TCP works fine, but UDP is messed up.. When streaming UDP, pings jump upto 1500-2000 ms. Users across the United States have been experiencing this, I am one of them. My ISP has been unable to give me a solution to this problem. Some users have reported after weeks, that its fixed but the ISPs haven't given the solution or know what's caused it.
Click here for more info
click here to download the program to test to see if you have this problem:
UDP packet stream program
In this program, change the delay to 10ms instead of the default he's listed in the readme.txt file.
So far, I'm almost positive that my problem is not the result of what you guys are getting. I replaced an internal crossover cable that I think was bad, which was disconnect a major part of my network. And SP1 fixed the problem with not letting the DNS out. [ April 15, 2002, 04:54 PM: Message edited by: jmargel ]
|
|
|
|
RE: Internet Access still stopping ... - 15.Apr.2002 8:19:00 PM
|
|
|
jmargel
Posts: 72
Joined: 3.Apr.2002
Status: offline
|
Ugh.. went down for me again.. With my setup, i have 5 hubs linked together. When it goes down, I can't ping any machines that are connected to the other hubs, but can ping the ones that are located on the same hub.
As soon as I disabled the external nic, the pings came back. Now how in the hell do you explain that one? I tried a new crossover cable, so I know thats not the problem, and my hubs are indicating that everything is fine.
My internal DNS server was on a different hub than my fileserver & isa server (which those 2 were on the same hub). They are now all on the same hub. I was losing dns to my client for the fact that my dns server was on another hub than the firewall. But when the pings came back, doing a nslookup on my dns server, it still could not resolve dns entried, until i rebooted the isa server.
At this point im looking into replacing both hubs, since I know the hub connected to the one w/ the servers are on, I cant ping the client when this disconnection occurs.
Im clueless.. and my workplace is getting pissed off at me.. MS get a damn patch out already for your isa!
|
|
|
|
RE: Internet Access still stopping ... - 15.Apr.2002 8:42:00 PM
|
|
|
msgelinas
Posts: 79
Joined: 21.Sep.2001
From: Victoria,BC,Canada
Status: offline
|
quote: Originally posted by jmargel: Ugh.. went down for me again.. With my setup, i have 5 hubs linked together. When it goes down, I can't ping any machines that are connected to the other hubs, but can ping the ones that are located on the same hub.
As soon as I disabled the external nic, the pings came back. Now how in the hell do you explain that one? I tried a new crossover cable, so I know thats not the problem, and my hubs are indicating that everything is fine.
My internal DNS server was on a different hub than my fileserver & isa server (which those 2 were on the same hub). They are now all on the same hub. I was losing dns to my client for the fact that my dns server was on another hub than the firewall. But when the pings came back, doing a nslookup on my dns server, it still could not resolve dns entried, until i rebooted the isa server.
At this point im looking into replacing both hubs, since I know the hub connected to the one w/ the servers are on, I cant ping the client when this disconnection occurs.
Im clueless.. and my workplace is getting pissed off at me.. MS get a damn patch out already for your isa!
Is the Hub linking limit not a maximum of 4 ?
|
|
|
|
RE: Internet Access still stopping ... - 19.Apr.2002 1:06:00 AM
|
|
|
AxleMunshine
Posts: 63
Joined: 13.Jul.2001
Status: offline
|
Hi everyone,
just to follow-up on the matter. If you look at my previous posts in this thread, my problem was strickly affecting external requests not being allowed.
Since my last changes, it did not reoccure once. The DNS is very stable and my server has been up for about 2 weeks (or since the day the last IIS cumulative patch came in). Anyway, since then, I added new sites to the multi-homed machine without problem. This means that I added new IPs. So, it does not look like the number of IPs are an issue (or I am pretty lucky).
Until I suffer again I assume that my problem was generated by the incorrect entry in my local DNS located on the ISA server.
However, I have now noticed that if I am inside the network and connect with nslookup to the external DNS (located behind ISA as I am), queries do not work. It has no impact from the inside since from my PC, addresses are resolved by another DNS. Maybe it's normal, because using the DNS FQN, it resolves to the external address? If I connect to the DNS through it's NAT address, no problem. Maybe it's just another DNS config problem, but I can connect to the same machine with its external address for other IP services.
|
|
|
|
RE: Internet Access still stopping ... - 9.Jul.2002 10:18:00 AM
|
|
|
erdmann
Posts: 5
Joined: 3.Jun.2002
Status: offline
|
Is this thread dead or solved? I'm experiencing the same problems here and have no clue (yet)....
Michel Erdmann
|
|
|
|
RE: Internet Access still stopping ... - 27.Nov.2002 12:18:00 PM
|
|
|
culmor
Posts: 2
Joined: 19.Feb.2002
Status: offline
|
Has anyone been able to resolve this issue? I have installed ISA Server in our branch office and all internet access stops until I get someone to disable/enable the internal nic.
I am going to ring MS support if no-one can help me.
Thanx in advance.
|
|
|
|
New Messages |
No New Messages |
Hot Topic w/ New Messages |
Hot Topic w/o New Messages |
Locked w/ New Messages |
Locked w/o New Messages |
|
Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|