RE: Conflict

From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Date: Tue, 18 Mar 2003 19:39:08 -0600
Hi Hanan,
 
Have you checked out Jim Harrison's seminal article on this subject over
at www.isaserver.org? 
 
HTH,
Tom
Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 
        -----Original Message-----
        From: hanan [mailto:nouran@xxxxxxxxx] 
        Sent: Tuesday, March 18, 2003 11:15 AM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RE: Conflict
        
        
        http://www.ISAserver.org
        
        

        Symptoms

        The following error is logged in Event Viewer because there is a
conflict with the Local Address Table (LAT) in Internet Security and
Acceleration (ISA) Server 2000 and the routing table: 
        Event Type: Error
        Event Source: Microsoft Web Proxy
        Event Category: None
        Event ID: 14120
        Date: 4/18/2001
        Time: 2:08:35 PM
        User: N/A
        Computer: computer name
        Description:
        
        The ISA Server services cannot create a packet filter
24.25.66.26. This event occurs when there is a conflict between the LAT
configuration and the Windows 2000 routing table. Check the routing
table and the LAT to find the source of the conflict.
        
        Data:
        0000: 41 01 00 c0 
        The data area also translates to error "0xc000141", or "(dec):
3072 321". If the LAT does not have a conflict with the local routing
table (for example, if you set the LAT correctly to only include the IP
addresses of all internal interfaces) you may see this event error under
the following circumstances: 
        *       You have configured ISA Web publishing to an internal
Web server, or to the local IIS server on the ISA server. 
        *       An internal client requests the Web site using a fully
qualified domain name (FQDN) that resolves to the external IP address of
ISA. 
        *       ISA has both NICs in the same segment and outbound
packets go out through the same NIC where the client's request arrived
(because that is where the default gateway is configured). 
         

        Cause

        This behavior occurs because when the ISA Web service listens on
the external IP address on behalf of the Web server, and the internal
client tries to access that service, Web proxy tries to create a packet
filter for that address because the proxy views that the address as
external (which it is). The packet filter driver fails to create the
filter because the address is not reachable through the external
interface; instead, the address is reachable through the loopback
interface. The result is the event log entry. 
         

        Resolution

        Although you can ignore this event, you can also resolve this
behavior. To do so, on the DNS server that is being used for internal
name resolution, create a host record (A record) for the fully qualified
domain name that is used by internal users and that resolves to the
internal IP address or the IP address of the Web server on which the Web
site is hosted. 
         
        Also you can check this
        
http://www.isaserver.org/articles/14120_Errors_Discussion_and_Solution.h
tml 
         
        Best regards
        hanan
         
         
        -----Original Message-----
        From: Sabahattin MISIRLI [mailto:smisirli@xxxxxxxxxxxxxxxxxxx]
        Sent: Tuesday, March 18, 2003 4:14 PM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] Conflict
         
        http://www.ISAserver.org
         
        Hello,
         
        Can anyone help me please? i keep getting following error
message in event viewer "there is a conflict 
        between LAT and windows 2000 routing table"
         
        Thanks,
         
        sabahattin
        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Exchange Server Resource Site: http://www.msexchange.org/
        Windows Security Resource Site: http://www.windowsecurity.com/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: nouran@xxxxxxxxx
        To unsubscribe send a blank email to
$subst('Email.Unsub') 
        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Exchange Server Resource Site: http://www.msexchange.org/
        Windows Security Resource Site: http://www.windowsecurity.com/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: tshinder@xxxxxxxxxxxxxxxxxx
        To unsubscribe send a blank email to
$subst('Email.Unsub')
RE: Conflict

Other related posts:
