[isapros] Re: You cannot host TCP connections when Receive Side Scaling is enabled in Windows Server 2003 with Service Pack 2
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isapros@xxxxxxxxxxxxx>
- Date: Fri, 23 Mar 2007 12:47:40 -0500
I was in a particularly bad mood last night -- serveral things broke in
my infrastructure at the same time and I'll admit to terminal
sourpuss-ism. However, it does chap my hide when they post this kind of
stuff without providing appropriate context. I'm sure the guy who wrote
the thing had the best of intentions, but didn't really know how to
communicate the problem most effectively. My bad.
I didn't know that there was no training on how to write a good KB --
that's something that would be worthwhile, as I know most the guys there
are pretty bright and just need a little "knowledge transfer" to make
their KB's really useful for everyone. I'd even volunteer to go to Las
Colinas and do this type of training gratis if they'll accept my offer.
I can definitely tell when you've had a hand in a KB -- they're human
readable and provide some context before they get into the meat of the
thing. That goes a long way at providing value!
The Exchange team really needs to stay away from issues regarding
network security. They've dropped the ball time and time again and put
out really nasty FUD. I understand that they can feel their oats because
they have the cash cow over at Microsoft, but they end up hurting other
groups (like ISA) and the customer by putting out false and misleading
information to the public.
Thanks!
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)
> -----Original Message-----
> From: isapros-bounce@xxxxxxxxxxxxx
> [mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
> Sent: Friday, March 23, 2007 8:36 AM
> To: isapros@xxxxxxxxxxxxx
> Subject: [isapros] Re: You cannot host TCP connections when
> Receive Side Scaling is enabled in Windows Server 2003 with
> Service Pack 2
>
> I'll do that. Don't get your hopes up, though - anyone or
> their brother
> can write a KB and no one gets training. Add to this the facts that
> most dev/test folks have difficulty expressing technical points in
> human-understandable ways and that the MS "official phrasebook" makes
> sand seem damp by comparison and you have a real recipe for
> intellectual
> disaster.
>
> Believe it or not, I spend about 50% of my time correcting
> other folks'
> KB's, whitepapers and other silliness.
> I'm actually starting to win the Exchange team's "ISA ain't
> safe in the
> domain" FUD, but the resistance is high. I can't believe I
> actually get
> the unicorn argument in response to my efforts... <sigh>
>
> -----Original Message-----
> From: isapros-bounce@xxxxxxxxxxxxx
> [mailto:isapros-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thomas W Shinder
> Sent: Thursday, March 22, 2007 8:31 PM
> To: isapros@xxxxxxxxxxxxx
> Subject: [isapros] Re: You cannot host TCP connections when
> Receive Side
> Scaling is enabled in Windows Server 2003 with Service Pack 2
>
> OK, termination is a bit harsh. How about referral to HR so
> that he can
> get some medical help for his autism?
>
> -----Original Message-----
> From: isapros-bounce@xxxxxxxxxxxxx
> [mailto:isapros-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thomas W Shinder
> Sent: Thursday, March 22, 2007 10:19 PM
> To: isapros@xxxxxxxxxxxxx
> Subject: [isapros] Re: You cannot host TCP connections when
> Receive Side
> Scaling is enabled in Windows Server 2003 with Service Pack 2
>
> Oh, well that makes sense, since they said ICS specifically.
>
> Can I recommended termination of the employee who wrote that worst in
> history KB? You can quote me on that. It's a travesty and
> makes MS look
> worse than Syphco or Czechpint.
>
> -----Original Message-----
> From: isapros-bounce@xxxxxxxxxxxxx
> [mailto:isapros-bounce@xxxxxxxxxxxxx]
> On Behalf Of Jim Harrison
> Sent: Thursday, March 22, 2007 8:17 PM
> To: isapros@xxxxxxxxxxxxx
> Subject: [isapros] Re: You cannot host TCP connections when
> Receive Side
> Scaling is enabled in Windows Server 2003 with Service Pack 2
>
> It's only "ISA-specific" because ISA performs NAT on the
> traffic passing
> through it.
> It's new code for WS03 Sp2 that breaks any scenario where traffic
> crossing the WS03 host gets the NAT hammer applied to it.
>
> -----Original Message-----
> From: isapros-bounce@xxxxxxxxxxxxx
> [mailto:isapros-bounce@xxxxxxxxxxxxx]
> On Behalf Of Amy Babinchak
> Sent: Thursday, March 22, 2007 5:51 PM
> To: isapros@xxxxxxxxxxxxx
> Subject: [isapros] Re: You cannot host TCP connections when
> Receive Side
> Scaling is enabled in Windows Server 2003 with Service Pack 2
>
> I couldn't make heads or tails of any of the RSS documents. There are
> quite a few of them on MSDN. I'm also hearing that it is hitting SBS
> Premium users hard. I've been asked if it's an ISA related
> thing. Since
> the RSS docs make no sense to me, I have no idea.
>
>
>
> Amy
>
>
>
>
>
>
>
>
>
> From: isapros-bounce@xxxxxxxxxxxxx
> [mailto:isapros-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thomas W Shinder
> Sent: Thursday, March 22, 2007 8:32 PM
> To: isapros@xxxxxxxxxxxxx
> Subject: [isapros] You cannot host TCP connections when Receive Side
> Scaling is enabled in Windows Server 2003 with Service Pack 2
>
>
>
> Does anyone speak PSS? I think that this might apply to ISA, but given
> the SBSoid writing of this article, it's hard to tell.
>
> You cannot host TCP connections when Receive Side Scaling is
> enabled in
> Windows Server 2003 with Service Pack 2:
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;927695
>
> "SYMPTOMS
>
> You cannot host Transmission Control Protocol (TCP) connections when
> Receive Side Scaling is enabled in Microsoft Windows Server 2003 with
> Service Pack 2 (SP2). The TCP connections are reset. This
> problem occurs
> if you use Network Address Translation (NAT) and if the host
> computer is
> configured to be an Internet Connection Sharing host server computer."
>
> First, what does it mean to "host" TCP connections? Does it mean
> "terminate" connection?
>
> Does it mean something else?
>
> Second, "if you use a NAT"
>
> NAT where? In front of the box? Behind the box? On the box? At Tim's
> house?
>
> Third "if the host computer is configured to be an Internet Connection
> Sharing host server computer"
>
> Does this apply ONLY to ICS? What about RRAS NAT? What about ISA NAT?
>
> Someone needs to tell these guys that we really don't live in their
> heads, even though they might hear voices. ;)
>
> Thanks!
>
> Tom
>
>
> All mail to and from this domain is GFI-scanned.
>
>
>
>
>
>
>
>
>
> All mail to and from this domain is GFI-scanned.
>
>
>
>
Other related posts:
