Hard to say if any email is being missed. I was using the new logging system (It is ALLOT BETTER than the ISA 2000 logging) when I noticed these. I will look back in my email logs and cross reference the times.
Interestingly enough, I am NOT using the SMTP part of ISA, but am running the Symantec gateway 4.x. I then publish the SMTP server on the ISA box (I used to use a packet filter on the prior ISA version)....from what I gather the errors I am seeing are before the SMTP server sees the traffic.
As always, thanks, Bob
quote:Originally posted by tshinder: Hi Bob,
Any mail being missed? Could the ISA firewall just be port scanned?
It is running on the ISA box. I have been doing this since way back on the the previous version of ISA with a packet filter. Works quite well.
The Symentac gateways turns away a host of bad connections, viruses etc. Allows more advanced filterin, nice reporting etc. I figure the more viruses/garbage I can keep away from my Exchange server the better even though I have AV on it as well.
It does not utilize the MS SMTP server but rather it's own.
BTW, the dropped connections are showing on the ISA logs, but there are no corresponding SMTP errors, connections, drops, etc. So I guess the firewall is doing it's job!
I am curious, however, what it means exactly....
Thanks, as always, Bob
Originally posted by tshinder: Hi Bob,
Is the Symantec piece running on the ISA firewall?
Has anyone resolved this issue??? I'm having the same problem. Dr. Shinder suggested increasing the connection limit to the mail server. I've done that but I'm not sure that it has resolved the problem... maybe I haven't raised it high enough???