Re: Proxy service failed.
- From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 20 Sep 2004 00:18:58 -0700
Depends on how much time and energy must be spent.
BTW, on the first restart of 2 to make sure the error happens on each
restart before disabling Download Security, the server did not come back up.
I'll see what is up in the morning.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
> -----Original Message-----
> From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> Sent: Sunday, September 19, 2004 11:02 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Re: Proxy service failed.
>
> http://www.ISAserver.org
>
> Unfortunately, that's probably going to happen.
> This kind of "multiple management" of traffic often leads to unresolved
finger-
> pointing.
> The only way I've seen it successfully resolved is when someone can debug
the
> machine and point to a particular chunk of code.
> How are your debugging skills?
>
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/Jim_Harrison/
> http://isatools.org
> Read the help / books / articles!
>
> ----- Original Message -----
> From: "John Tolmachoff (Lists)" <johnlist@xxxxxxxxxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Saturday, September 18, 2004 11:37
> Subject: [isalist] Re: Proxy service failed.
>
>
> http://www.ISAserver.org
>
> Thanks Jim. I can just picture it now. GFI blames Burstek. Burstek blames
> GFI.
>
> John Tolmachoff
> Engineer/Consultant/Owner
> eServices For You
>
>
> > -----Original Message-----
> > From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> > Sent: Saturday, September 18, 2004 11:02 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Re: Proxy service failed.
> >
> > http://www.ISAserver.org
> >
> > I didn't say that this would solve the issue, just that it's the best
> method for
> > narrowing it down.
> > If you disable the filter and you don't see the problem recur, then it's
> time to get GFI
> > folks involved.
> > The fact that it doesn't happen until several days have passed indicates
> that it's either
> > a time-based bug or that your recent
> > change exposed a bug in a previously-unexercised code path in the
filter.
> >
> > I can't answer as to why resolutions never show from the complaining
party
> (not that
> > unusual, frankly), but I know for a fact that
> > several issues in 3rd-party filters have crossed my desk and in only one
> case was ISA
> > code at fault.
> >
> > Jim Harrison
> > MCP(NT4, W2K), A+, Network+, PCG
> > http://isaserver.org/Jim_Harrison/
> > http://isatools.org
> > Read the help / books / articles!
> >
> > ----- Original Message -----
> > From: "John Tolmachoff (Lists)" <johnlist@xxxxxxxxxxxxxxxxxxx>
> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > Sent: Saturday, September 18, 2004 10:17
> > Subject: [isalist] Re: Proxy service failed.
> >
> >
> > http://www.ISAserver.org
> >
> > Well, while I might agree with you, nothing has changed on Download
> Security
> > over the last 10 days. The last time I changed it was to add a registry
> > entry so that excel files would not be incorrectly scanned as html
files.
> >
> > What bothers me is that the old posts I have seen on this point a finger
> at
> > the 3rd party app, but there is never a closing post saying this or this
> > fixed it. They are left hanging.
> >
> > I guess to test, I would need to restart the server say 2 more times and
> see
> > if the error occurs again, and then disable Download Security and then
> > restart a couple of times to see if it occurs.
> >
> > One thing I did note, if I manually restart and as I have now configured
> it
> > to restart on 1st & 2nd fail, it then starts fine and runs.
> >
> > John Tolmachoff
> > Engineer/Consultant/Owner
> > eServices For You
> >
> > > -----Original Message-----
> > > From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
> > > Sent: Saturday, September 18, 2004 9:59 AM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] Re: Proxy service failed.
> > >
> > > http://www.ISAserver.org
> > >
> > > Hi John,
> > >
> > > The "1000" event told you which component caused the fault:
> "dsecisa.dll".
> > > I got a $ that says this is "Download SECurity".
> > > Try disabling it and see if this reoccurs.
> > >
> > > Jim Harrison
> > > MCP(NT4, W2K), A+, Network+, PCG
> > > http://isaserver.org/Jim_Harrison/
> > > http://isatools.org
> > > Read the help / books / articles!
> > >
> > > ----- Original Message -----
> > > From: "John Tolmachoff (Lists)" <johnlist@xxxxxxxxxxxxxxxxxxx>
> > > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > > Sent: Saturday, September 18, 2004 01:08
> > > Subject: [isalist] Proxy service failed.
> > >
> > >
> > > http://www.ISAserver.org
> > >
> > > Today (well it was Friday) the web proxy service failed at 3:30 PM
this
> is
> > > the first time this has done this. At 11:30, I restarted the service
and
> > > then checked everything out. I restarted the server and the error
> occurred
> > > again. However, I had set the recovery options on the service to
restart
> > on
> > > 1 and 2 fail, and it is now running.
> > >
> > > GFI Download security version 2.2 is installed as well as Burstek Web
> > Filter
> > > version 5.30.04 and Log analyzer.
> > >
> > > Nothing has changed on the server in about 10 days.
> > >
> > > Below are the event logs. I did some searching and the only thing I
> found
> > > are some posts related to moving GFI Download security to a higher
> > priority
> > > (From May of 2004) and possibly pointing at Web Sense.
> > >
> > > Any one have any ideas on what to look at?
> > >
> > > Application logs:
> > >
> > > ______________________________________________________
> > > Event Type: Error
> > > Event Source: Application Error
> > > Event Category: (100)
> > > Event ID: 1000
> > > Date: 9/17/2004
> > > Time: 3:33:17 PM
> > > User: N/A
> > > Computer: SRV6
> > > Description:
> > > Faulting application w3proxy.exe, version 3.0.1200.365, faulting
module
> > > dsecisa.dll, version 1.0.0.12, fault address 0x00012c46.
> > >
> > > For more information, see Help and Support Center at
> > > http://go.microsoft.com/fwlink/events.asp.
> > > Data:
> > > 0000: 41 70 70 6c 69 63 61 74 Applicat
> > > 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> > > 0010: 75 72 65 20 20 77 33 70 ure w3p
> > > 0018: 72 6f 78 79 2e 65 78 65 roxy.exe
> > > 0020: 20 33 2e 30 2e 31 32 30 3.0.120
> > > 0028: 30 2e 33 36 35 20 69 6e 0.365 in
> > > 0030: 20 64 73 65 63 69 73 61 dsecisa
> > > 0038: 2e 64 6c 6c 20 31 2e 30 .dll 1.0
> > > 0040: 2e 30 2e 31 32 20 61 74 .0.12 at
> > > 0048: 20 6f 66 66 73 65 74 20 offset
> > > 0050: 30 30 30 31 32 63 34 36 00012c46
> > > _______________________________________________________
> > > Event Type: Error
> > > Event Source: Microsoft ISA Server Control
> > > Event Category: None
> > > Event ID: 14079
> > > Date: 9/17/2004
> > > Time: 3:35:17 PM
> > > User: N/A
> > > Computer: SRV6
> > > Description:
> > > Due to an unexpected error, the service w3proxy stopped responding to
> all
> > > requests. This occurred 1 time(s) in the past 0:07 hours. Try to stop
> the
> > > service or kill the corresponding process if it does not respond, and
> > start
> > > it again. Check the Event Viewer for related error messages.
> > >
> > > For more information, see Help and Support Center at
> > > http://go.microsoft.com/fwlink/events.asp.
> > > _____________________________________________________
> > > Event Type: Information
> > > Event Source: Microsoft Web Proxy
> > > Event Category: None
> > > Event ID: 14186
> > > Date: 9/18/2004
> > > Time: 12:33:29 AM
> > > User: N/A
> > > Computer: SRV6
> > > Description:
> > > The Web Proxy Service was started successfully.
> > >
> > > For more information, see Help and Support Center at
> > > http://go.microsoft.com/fwlink/events.asp.
> > > __________________________________________________
> > > Event Type: Information
> > > Event Source: Application Error
> > > Event Category: (100)
> > > Event ID: 1004
> > > Date: 9/18/2004
> > > Time: 12:37:46 AM
> > > User: N/A
> > > Computer: SRV6
> > > Description:
> > > Reporting queued error: faulting application w3proxy.exe, version
> > > 3.0.1200.365, faulting module dsecisa.dll, version 1.0.0.12, fault
> address
> > > 0x00012c46.
> > >
> > > For more information, see Help and Support Center at
> > > http://go.microsoft.com/fwlink/events.asp.
> > > Data:
> > > 0000: 41 70 70 6c 69 63 61 74 Applicat
> > > 0008: 69 6f 6e 20 46 61 69 6c ion Fail
> > > 0010: 75 72 65 20 20 77 33 70 ure w3p
> > > 0018: 72 6f 78 79 2e 65 78 65 roxy.exe
> > > 0020: 20 33 2e 30 2e 31 32 30 3.0.120
> > > 0028: 30 2e 33 36 35 20 69 6e 0.365 in
> > > 0030: 20 64 73 65 63 69 73 61 dsecisa
> > > 0038: 2e 64 6c 6c 20 31 2e 30 .dll 1.0
> > > 0040: 2e 30 2e 31 32 20 61 74 .0.12 at
> > > 0048: 20 6f 66 66 73 65 74 20 offset
> > > 0050: 30 30 30 31 32 63 34 36 00012c46
> > > ___________________________________________________
> > > Event Type: Error
> > > Event Source: Application Error
> > > Event Category: None
> > > Event ID: 1001
> > > Date: 9/18/2004
> > > Time: 12:39:24 AM
> > > User: N/A
> > > Computer: SRV6
> > > Description:
> > > Fault bucket 118664497.
> > >
> > > For more information, see Help and Support Center at
> > > http://go.microsoft.com/fwlink/events.asp.
> > > Data:
> > > 0000: 42 75 63 6b 65 74 3a 20 Bucket:
> > > 0008: 31 31 38 36 36 34 34 39 11866449
> > > 0010: 37 0d 0a 7..
> > >
> > > >From the System log:
> > >
> > > Event Type: Information
> > > Event Source: Disk
> > > Event Category: None
> > > Event ID: 119
> > > Date: 9/17/2004
> > > Time: 3:32:02 PM
> > > User: N/A
> > > Computer: SRV6
> > > Description:
> > > The driver for device \Device\Harddisk0\DR0 delayed non-paging Io
> requests
> > > for 30 ms to recover from a low memory condition.
> > >
> > > For more information, see Help and Support Center at
> > > http://go.microsoft.com/fwlink/events.asp.
> > > Data:
> > > 0000: 04 00 00 00 02 00 52 00 ......R.
> > > 0008: 00 00 00 00 77 00 04 40 ....w..@
> > > 0010: 00 00 00 00 00 00 00 00 ........
> > > 0018: 00 00 00 00 00 00 00 00 ........
> > > 0020: 00 00 00 00 00 00 00 00 ........
> > > _______________________________________________
> > >
> > > Event Type: Information
> > > Event Source: Disk
> > > Event Category: None
> > > Event ID: 119
> > > Date: 9/17/2004
> > > Time: 3:32:02 PM
> > > User: N/A
> > > Computer: SRV6
> > > Description:
> > > The driver for device \Device\Harddisk1\DR1 delayed non-paging Io
> requests
> > > for 30 ms to recover from a low memory condition.
> > >
> > > For more information, see Help and Support Center at
> > > http://go.microsoft.com/fwlink/events.asp.
> > > Data:
> > > 0000: 04 00 00 00 02 00 52 00 ......R.
> > > 0008: 00 00 00 00 77 00 04 40 ....w..@
> > > 0010: 00 00 00 00 00 00 00 00 ........
> > > 0018: 00 00 00 00 00 00 00 00 ........
> > > 0020: 00 00 00 00 00 00 00 00 ........
> > > ___________________________________________________
> > >
> > > Event Type: Error
> > > Event Source: Service Control Manager
> > > Event Category: None
> > > Event ID: 7034
> > > Date: 9/17/2004
> > > Time: 3:33:23 PM
> > > User: N/A
> > > Computer: SRV6
> > > Description:
> > > The Microsoft Web Proxy service terminated unexpectedly. It has done
> this
> > 1
> > > time(s).
> > >
> > > For more information, see Help and Support Center at
> > > http://go.microsoft.com/fwlink/events.asp.
> > >
> > > John Tolmachoff
> > > Engineer/Consultant/Owner
> > > eServices For You
> > >
> > >
> > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Other Internet Software Marketing Sites:
> > > World of Windows Networking: http://www.windowsnetworking.com
> > > Leading Network Software Directory: http://www.serverfiles.com
> > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > Network Security Library: http://www.secinf.net/
> > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List as:
> > jim@xxxxxxxxxxxx
> > > To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Other Internet Software Marketing Sites:
> > > World of Windows Networking: http://www.windowsnetworking.com
> > > Leading Network Software Directory: http://www.serverfiles.com
> > > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > > Windows Security Resource Site: http://www.windowsecurity.com/
> > > Network Security Library: http://www.secinf.net/
> > > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion List as:
> > > johnlist@xxxxxxxxxxxxxxxxxxx
> > > To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org
> > Windows Security Resource Site: http://www.windowsecurity.com/
> > Network Security Library: http://www.secinf.net/
> > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List as:
> > johnlist@xxxxxxxxxxxxxxxxxxx
> > To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
