RE: Firewall Service Crashed...

  • From: "Wayne Berry" <wayne@xxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 26 Apr 2005 11:14:23 -0700

Dan,

On one of the error you where reporting, the Windows Service for ISA doesn't
die, the ISA server just stops responding.  So using the Windows Service
properties will not help.

-Wayne

-----Original Message-----
From: Ball, Dan [mailto:DBall@xxxxxxxxxxx] 
Sent: Tuesday, April 26, 2005 10:14 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Firewall Service Crashed...

http://www.ISAserver.org

Cool, will be looking for that when you get it released.  It also brings
up an interesting question I had last night.  

In the Windows Services Properties, you can define what to do if a
service dies.  In the recovery tab, you can tell it to do nothing, run a
program, restart the service, or reboot the server.  I would assume this
program would fall into the same category.

If I set this to restart the service, I run the risk of any add-ons
(i.e. SurfControl) not working properly, so the next logical choice is
to restart the server, as this will load things in the proper order.  

However, if I set it to restart the server, I would think that might be
a possible security loophole.  I don't have any details on "why" that
would be a security risk, but anytime you can cause a server to reboot
via a fault sounds dangerous.

What do you guys think?


-----Original Message-----
From: Wayne Berry [mailto:wayne@xxxxxxxxxx] 
Sent: Tuesday, April 26, 2005 11:30
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Firewall Service Crashed...

http://www.ISAserver.org

Dan,

If you ever get these types of errors, let me know and you can use
ISAReset
(in Beta) to capture a .dmp of the issue for the ISAPI Filter
developers.
It will also automatically restart your ISA services.

More info:

http://www.xcache.com/home/default.asp?c=67&p=810

Command Line:

ISARESET.EXE (c) Post Point Software 2005

Usage:
iisreset

        /RESTART        Stop and then restart all ISA services.
        /START          Start all ISA services.
        /STOP           Stop all ISA services.
        /REBOOT         Reboot the computer.
        /DUMP           Create a MiniDump On Exception.
        /REBOOTONERROR  Reboot the computer if an error occurs when
starting, stopping, or restarting ISA services.
        /NOFORCE        Do not forcefully terminate ISA services if
                        attempting to stop them gracefully fails.
        /TIMEOUT:val    Specify the timeout value ( in seconds ) to wait
for
                        a successful stop of ISA services. On expiration
                        of this timeout the computer can be rebooted if
                        the /REBOOTONERROR parameter is specified.
                        The default value is 120s for restart, 60s for
stop,
                        and 20s for reboot.
        /STATUS         Display the status of all ISA services.
        /ENABLE         Enable restarting of ISA Services
                        on the local system.
        /DISABLE        Disable restarting of ISA Services
                        on the local system.

-Wayne
The ISAPI Dev Lurking on the ISA Admin List

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
wayne@xxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



Other related posts: