RE: Exchange 2000 behind ISA firewall
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 25 Mar 2003 18:43:03 -0600
Hi Kevin,
Do a baseline on your "Non-Connected UDP Mappings" in the Performance
console. Get a good idea where is usually hangs when things are working.
Then check it when things aren't working. Do you see any significant
differences? If so, one thing that can help you out is to schedule the
IPNAT service to restart every few hours. This will disrupt firewall
service connections, but won't affect Web Proxy service connections.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Kevin S. Malinowski [mailto:Kevin@xxxxxxxxxx]
Sent: Tuesday, March 25, 2003 12:07 PM
To: [ISAserver.org Discussion List]
Subject: RE: [isalist] Exchange 2000 behind ISA firewall
Hi, Eddie.
Our ISA server started doing the same thing last week. The only
difference is that I am publishing 1 Exchange server, 2 GroupWise
servers, 1 NetMail server and 1 virtual SMTP server all behind the ISA
server (on separate IP's).
None of these mail servers are on our primary IP address, they
are all published on separate secondary IP addresses bound to the single
external NIC.
As a general rule we find that incoming mail stops first, then
eventually outgoing stops as well.
To get mail flowing again requires the firewall service to be
stopped and restarted. Currently I have a scheduled task doing this
nightly (approx 1am) which seems to solve the problem. This is only a
bandaid though, but it will give me some time to determine the real
issue.
If I find out more, I will post back.
Kevin
-----Original Message-----
From: Eddie Kwong [mailto:eddiek@xxxxxxxxxxxx]
Sent: Tue 3/25/2003 9:42 AM
To: [ISAserver.org Discussion List]
Cc:
Subject: [isalist] Exchange 2000 behind ISA firewall
http://www.ISAserver.org
I have a strange problem happening twice since last
week.
My environment is a simple flat domain with less than
200 users behind the ISA server and Exchange 2000 is running behind the
firewall.
The whole setup has been working without a flaw for at
least 15 months.
The problem is that 'inbound' SMTP Internet mail is not
working twice since last Friday. In one case, I have to reboot the ISA
Server, in the second case, I have to restart the Web Proxy service on
the ISA server.
Outbound smtp mail is fine. I can trace it from the
Exchange Server message tracking it message has been delivered to
outside world.
It is frustrating because there is no way I can find out
proactively. Only when user come in and complain that they haven't
received any outside mail then I can react. We use to receive close to
200+ inbound internet mail per hour so I get the notice pretty soon but
still, I would like to fix the problem.
I am emailing this list because in both cases, I fix the
problem by sort of rebooting the isa server.
Any clue?
Many thanks
------------------------------------------------------
List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site:
http://www.msexchange.org/
Windows Security Resource Site:
http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org
Discussion List as: kevin@xxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')
Other related posts:
