RE: Access to remote ISA 2004 server via RDP no longer working
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 17 Feb 2006 08:22:39 -0800
Just RDP in and ...
Oh - yeh...
:-p
-----Original Message-----
From: Rob Moore [mailto:RMoore@xxxxxxxx]
Sent: Friday, February 17, 2006 8:14 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Access to remote ISA 2004 server via RDP no
longer working
http://www.ISAserver.org
I'll have to go back over to the remote site to check that out. Probably
won't be able to do that until Tuesday (we have a holiday on Monday, and
I have a busy weekend getting ready for puppies to be born). So thanks
for your input and please be patient. I'll be getting back to you.
Meanwhile, any idea why this might have suddenly changed?
Thanks,
Rob
-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
Sent: Friday, February 17, 2006 10:50 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Access to remote ISA 2004 server via RDP no
longer working
http://www.ISAserver.org
"abortively closed" is one side of the connection (client or server)
that is slamming the door on the connection be sending a RST instead of
the expected SYN_ACK.
This usually happens because the application / service is not listening
on the destination port and the TCP stack does the right thing by
telling the client to bugger off.
What is the output from "nststat -ano -p tcp" at the ISA?
-----Original Message-----
From: Rob Moore [mailto:RMoore@xxxxxxxx]
Sent: Friday, February 17, 2006 7:30 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Access to remote ISA 2004 server via RDP no longer
working
http://www.ISAserver.org
Hello all--
I have a remote ISA 2004 server (on Win2k3 SP1, was ISA SP1, now is ISA
SP2) at a colocation facility. I also have an ISA 2004 server (on Win2k3
SP1, ISA SP1) here in the building. Behind the remote ISA server is a
web server. There is a VPN connection between the two ISA servers.
Up until this week, I have been able to RDP from here to both remote
servers. I could RDP to both servers over the VPN or without it, for
those times when the VPN has broken.
I don't know exactly when I stopped being able to RDP. I first
discovered it this week, right after I applied the latest MS security
patches to my computer. I was then going about applying them to my
servers. I got into and applied them to the remote web server. But I
couldn't get into my remote ISA server. I can still RDP to the remote
web server, both over the VPN and not over the VPN. When I try to RDP to
the ISA server, I get this error at my workstation:
"Remote Desktop Disconnected
The client could not connect to the remote computer.
Remote connections might not be enabled or the computer might be too
busy to accept new connections. Blah blah blah."
So this morning I went over to the colocation facility. I monitored
attempts to get in via RDP. Then I tried applying all the MS updates
(except for ISA SP2) and rebooting. RDP attempts got the same result.
Then I tried applying ISA SP2. RDP attempts yielded the same result.
Examining the logs on the remote ISA server shows me that it is NOT now,
nor was it before, denying the connection. Instead I'm getting the
result code "0x80074e21". When I Google that, I get to a Microsoft web
page with lots of error codes, including that one on ISA, and it says "A
connection was abortively closed after one of the peers sent a RST
segment."
Does that sound familiar to anyone? Any ideas about how to approach this
problem? It's complicated by the fact that, now that RDP to the ISA
server isn't working, I have to take a 30-minute trip to the colocation
facility if I want to get my hands on the server.
One thing I didn't think of trying until I'd left the facility was
RDPing from the web server to the ISA server.
Thanks,
Rob
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
rmoore@xxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
Other related posts:
