Re: ISA Server SMTP Issue

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 28 May 2003 15:41:53 -0500

Hi Mark,

Do you have the SMTP filter enabled? Is it completely updated? Try
disabling the filter and see if that stop the problem. I have sites that
get GBs of email/day through ISA Server firewalls and I don't see
problems with inbound SMTP messages getting through.

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Kingery, Mark [mailto:Mark.Kingery@xxxxxxxxxxxxxx] 
Sent: Wednesday, May 28, 2003 1:00 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Its hard to believe that this issue has been out here this long as in
the link I posted, but Microsoft does not have any KB articles that I
can find.

http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&threadm=uWj7
PMiCBHA.1000%40tkmsftngp02&rnum=1&prev=/groups%3Fq%3DISA%2BServer%2BSMTP
%2Binbound%2Bstops%2Bworking%26hl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3DUTF-8
%26selm%3DuWj7PMiCBHA.1000%2540tkmsftngp02%26rnum%3D1

If this keeps up the way it is going, my company is going to make me
scrap ISA and find another solution.

-----Original Message-----
From: Kingery, Mark 
Sent: Wednesday, May 28, 2003 7:02 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


My Isa box has a connection to a dedicated T1.  There is no DSL or Cable
Modem.  I use External DNS servers provided by my ISP.  

DNS resolution is not a problem, when this issue happens my users are
still able to hit the internet.  It is just ISA not allowing SMTP
inbound to happen.  

Like Kevin said, there is no pattern to it, and there is nothing to show
in the Event Logs that this has happened.  We have to just monitor email
here to make sure it is flowing inbound.

I do receive a lot of inbound email, my guess is that we are just
overloading ISA, or we are being attacked on that port.  



-----Original Message-----
From: Kevin S. Malinowski [mailto:Kevin@xxxxxxxxxx]
Sent: Wednesday, May 28, 2003 12:28 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi, Tom.

Thanks, that is what I am doing right now, but running it once a day at
1 am, other than that I depend on the lack of SPAM to alert me that the
server needs a manual restart. 

I never thought that I would actually have a use for SPAM. :)

Kevin

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, May 27, 2003 11:25 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi Kevin,

Several ways to do it.

How about a batch file with the following:

net stop ipnat /y
net start "microsoft firewall"

And then schedule it to run every few hours. There may be more elegant
ways, but it works :-)

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Kevin S. Malinowski [mailto:Kevin@xxxxxxxxxx] 
Sent: Wednesday, May 28, 2003 12:22 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi, Tom,

It is a 7 MB DSL connection, although there is a modem in the box, it is
not configured as an interface in ISA.

This one truly has me stumped as well. I thought it was only us, but
when Mark's post came up today it got me digging again.

Any suggestions as to the best method to schedule a restart of the ISA
services on a regular basis?

Kevin

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, May 27, 2003 11:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi Kevin,

Darn. My only other guess is that maybe you're using a dial up
connection.

Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Kevin S. Malinowski [mailto:Kevin@xxxxxxxxxx] 
Sent: Wednesday, May 28, 2003 12:08 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi, Tom.

Our public DNS is hosted offsite. We have a split DNS implementation.

Kevin

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, May 27, 2003 7:15 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi Kevin,

Are you publishing your public DNS servers?

Thanks!
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: Kevin S. Malinowski [mailto:Kevin@xxxxxxxxxx] 
Sent: Tuesday, May 27, 2003 11:58 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi, Mark and Jim.

I have an ISA server that the same situation occurs on. Currently the
box is Windows 2000 Adv Server SP3, ISA SP1 with the NAT hotfix applied.

There are 3 separate internal SMTP servers published on three separate
external IP's. (none of the external IP's are in the LAT)

The same situation occurs, where no external SMTP traffic is received by
any of the internal SMTP servers until the ISA services are restarted.
Their appears to be no recoginizable pattern as to when this will occur.
It may happen twice this week, then not again for two weeks. Nothing is
in the event logs and nothing seems to be noticable in perfmon.

The internal SMTP servers are 2 GroupWise (GWIA) and 1 Exchange 2000.

Kevin

-----Original Message-----
From: Kingery, Mark [mailto:Mark.Kingery@xxxxxxxxxxxxxx]
Sent: Tuesday, May 27, 2003 7:30 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


There is nothing in the Event logs,

My ISA sever is SP1 and FP1.

This does not affect any other services, all users are able to access
the internet through the ISA server.  It just seems to be the SMTP
inbound.  

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Tuesday, May 27, 2003 8:16 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


What do you find in the event logs?
What is your ISA fix level?

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!



http://www.ISAserver.org


I have configured on my ISA server a Server publishing rule for SMTP on
port 25, this has been working without any issues for 18 months, until
recently about the last 4 weeks, the ISA server will stop accepting SMTP
mail.  The only way for me to fix this is to stop and start all ISA
services. 

Nothing has changed on the ISA server.

Anyone have any ideas for my issue?
Thanks Mark

My server is 

Windows 2000 SP3
ISA Server FP1

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mark.kingery@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kevin@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kevin@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kevin@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kevin@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mark.kingery@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mark.kingery@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: