Re: Proxy service failed.

  • From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 18 Sep 2004 10:17:15 -0700

Well, while I might agree with you, nothing has changed on Download Security
over the last 10 days. The last time I changed it was to add a registry
entry so that excel files would not be incorrectly scanned as html files.

What bothers me is that the old posts I have seen on this point a finger at
the 3rd party app, but there is never a closing post saying this or this
fixed it. They are left hanging.

I guess to test, I would need to restart the server say 2 more times and see
if the error occurs again, and then disable Download Security and then
restart a couple of times to see if it occurs.

One thing I did note, if I manually restart and as I have now configured it
to restart on 1st & 2nd fail, it then starts fine and runs.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

> -----Original Message-----
> From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> Sent: Saturday, September 18, 2004 9:59 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: Proxy service failed.
> 
> http://www.ISAserver.org
> 
> Hi John,
> 
> The "1000" event told you which component caused the fault: "dsecisa.dll".
> I got a $ that says this is "Download SECurity".
> Try disabling it and see if this reoccurs.
> 
>   Jim Harrison
>   MCP(NT4, W2K), A+, Network+, PCG
>   http://isaserver.org/Jim_Harrison/
>   http://isatools.org
>   Read the help / books / articles!
> 
> ----- Original Message -----
> From: "John Tolmachoff (Lists)" <johnlist@xxxxxxxxxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Saturday, September 18, 2004 01:08
> Subject: [isalist] Proxy service failed.
> 
> 
> http://www.ISAserver.org
> 
> Today (well it was Friday) the web proxy service failed at 3:30 PM this is
> the first time this has done this. At 11:30, I restarted the service and
> then checked everything out. I restarted the server and the error occurred
> again. However, I had set the recovery options on the service to restart
on
> 1 and 2 fail, and it is now running.
> 
> GFI Download security version 2.2 is installed as well as Burstek Web
Filter
> version 5.30.04 and Log analyzer.
> 
> Nothing has changed on the server in about 10 days.
> 
> Below are the event logs. I did some searching and the only thing I found
> are some posts related to moving GFI Download security to a higher
priority
> (From May of 2004) and possibly pointing at Web Sense.
> 
> Any one have any ideas on what to look at?
> 
> Application logs:
> 
> ______________________________________________________
> Event Type: Error
> Event Source: Application Error
> Event Category: (100)
> Event ID: 1000
> Date: 9/17/2004
> Time: 3:33:17 PM
> User: N/A
> Computer: SRV6
> Description:
> Faulting application w3proxy.exe, version 3.0.1200.365, faulting module
> dsecisa.dll, version 1.0.0.12, fault address 0x00012c46.
> 
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 41 70 70 6c 69 63 61 74   Applicat
> 0008: 69 6f 6e 20 46 61 69 6c   ion Fail
> 0010: 75 72 65 20 20 77 33 70   ure  w3p
> 0018: 72 6f 78 79 2e 65 78 65   roxy.exe
> 0020: 20 33 2e 30 2e 31 32 30    3.0.120
> 0028: 30 2e 33 36 35 20 69 6e   0.365 in
> 0030: 20 64 73 65 63 69 73 61    dsecisa
> 0038: 2e 64 6c 6c 20 31 2e 30   .dll 1.0
> 0040: 2e 30 2e 31 32 20 61 74   .0.12 at
> 0048: 20 6f 66 66 73 65 74 20    offset
> 0050: 30 30 30 31 32 63 34 36   00012c46
> _______________________________________________________
> Event Type: Error
> Event Source: Microsoft ISA Server Control
> Event Category: None
> Event ID: 14079
> Date: 9/17/2004
> Time: 3:35:17 PM
> User: N/A
> Computer: SRV6
> Description:
> Due to an unexpected error, the service w3proxy stopped responding to all
> requests. This occurred 1 time(s) in the past 0:07 hours. Try to stop the
> service or kill the corresponding process if it does not respond, and
start
> it again. Check the Event Viewer for related error messages.
> 
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> _____________________________________________________
> Event Type: Information
> Event Source: Microsoft Web Proxy
> Event Category: None
> Event ID: 14186
> Date: 9/18/2004
> Time: 12:33:29 AM
> User: N/A
> Computer: SRV6
> Description:
> The Web Proxy Service was started successfully.
> 
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> __________________________________________________
> Event Type: Information
> Event Source: Application Error
> Event Category: (100)
> Event ID: 1004
> Date: 9/18/2004
> Time: 12:37:46 AM
> User: N/A
> Computer: SRV6
> Description:
> Reporting queued error: faulting application w3proxy.exe, version
> 3.0.1200.365, faulting module dsecisa.dll, version 1.0.0.12, fault address
> 0x00012c46.
> 
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 41 70 70 6c 69 63 61 74   Applicat
> 0008: 69 6f 6e 20 46 61 69 6c   ion Fail
> 0010: 75 72 65 20 20 77 33 70   ure  w3p
> 0018: 72 6f 78 79 2e 65 78 65   roxy.exe
> 0020: 20 33 2e 30 2e 31 32 30    3.0.120
> 0028: 30 2e 33 36 35 20 69 6e   0.365 in
> 0030: 20 64 73 65 63 69 73 61    dsecisa
> 0038: 2e 64 6c 6c 20 31 2e 30   .dll 1.0
> 0040: 2e 30 2e 31 32 20 61 74   .0.12 at
> 0048: 20 6f 66 66 73 65 74 20    offset
> 0050: 30 30 30 31 32 63 34 36   00012c46
> ___________________________________________________
> Event Type: Error
> Event Source: Application Error
> Event Category: None
> Event ID: 1001
> Date: 9/18/2004
> Time: 12:39:24 AM
> User: N/A
> Computer: SRV6
> Description:
> Fault bucket 118664497.
> 
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 42 75 63 6b 65 74 3a 20   Bucket:
> 0008: 31 31 38 36 36 34 34 39   11866449
> 0010: 37 0d 0a                  7..
> 
> >From the System log:
> 
> Event Type: Information
> Event Source: Disk
> Event Category: None
> Event ID: 119
> Date: 9/17/2004
> Time: 3:32:02 PM
> User: N/A
> Computer: SRV6
> Description:
> The driver for device \Device\Harddisk0\DR0 delayed non-paging Io requests
> for 30 ms to recover from a low memory condition.
> 
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 04 00 00 00 02 00 52 00   ......R.
> 0008: 00 00 00 00 77 00 04 40   ....w..@
> 0010: 00 00 00 00 00 00 00 00   ........
> 0018: 00 00 00 00 00 00 00 00   ........
> 0020: 00 00 00 00 00 00 00 00   ........
> _______________________________________________
> 
> Event Type: Information
> Event Source: Disk
> Event Category: None
> Event ID: 119
> Date: 9/17/2004
> Time: 3:32:02 PM
> User: N/A
> Computer: SRV6
> Description:
> The driver for device \Device\Harddisk1\DR1 delayed non-paging Io requests
> for 30 ms to recover from a low memory condition.
> 
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 04 00 00 00 02 00 52 00   ......R.
> 0008: 00 00 00 00 77 00 04 40   ....w..@
> 0010: 00 00 00 00 00 00 00 00   ........
> 0018: 00 00 00 00 00 00 00 00   ........
> 0020: 00 00 00 00 00 00 00 00   ........
> ___________________________________________________
> 
> Event Type: Error
> Event Source: Service Control Manager
> Event Category: None
> Event ID: 7034
> Date: 9/17/2004
> Time: 3:33:23 PM
> User: N/A
> Computer: SRV6
> Description:
> The Microsoft Web Proxy service terminated unexpectedly.  It has done this
1
> time(s).
> 
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> 
> John Tolmachoff
> Engineer/Consultant/Owner
> eServices For You
> 
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx



Other related posts: